CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
What the vulnerability does
Generation of Error Message Containing Sensitive Information vulnerability in videogallery Vimeography vimeography allows Retrieve Embedded Sensitive Data.This issue affects Vimeography: from n/a through <= 2.4.4.
Explanation of Vulnerability in Simple Terms
Vimeography versions 2.4.4 and earlier expose sensitive information through error messages or debug output. An attacker on the network can retrieve partial information about the site's configuration or internal state without authentication. The vulnerability has a CVSS score of 5.3 (medium). Update to version 2.4.5 or later.
What an attacker can do
Read sensitive information about the site's configuration or internal state without logging in.
Potential impact on your site
Attackers can discover details about your site's setup that could aid further attacks.
Conditions required to exploit
Network access only; no authentication or user interaction required.
Key dates
External resources
Related vulnerabilities
