CVE-2024-5524 MEDIUM

CVE-2024-5524: Information exposure vulnerability in Astrotalks

Vendor Astrotalks

Product Astrotalks

Weakness CWE-200 · Info exposure

Published May 31, 2024

Last update August 1, 2024

View on NVD All CVEs

CVSS base score

5.3/10

Attack vector Network

Attack complexity Low

Privileges required None

User interaction None

Confidentiality Low

Integrity None

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

What the vulnerability does

01Description

Information exposure vulnerability in Astrotalks affecting version 10/03/2023. This vulnerability allows unregistered users to access all internal links of the application without providing any credentials.

Key dates

02Disclosure timeline

May 31, 2024 CVE published

August 1, 2024 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2024-5524

Related vulnerabilities

04Related CVE

CVE-2024-20396 CVE-2021-22793 CVE-2024-39807 Channel IDs of archived/restored channels leaked via webhook events CVE-2025-31976 HCL BigFix Service Management (SM) is vulnerable to insufficiently protected credentials CVE-2022-29071 This advisory documents an internally found vulnerability in the on premises deployment model of Arista CloudVision Portal (CVP) where under a certain set of conditions, user passwords can be leaked in the Audit and System logs. The impact of this vu ...