CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
What the vulnerability does
Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in J. Tyler Wiest Jetpack Feedback Exporter jetpack-feedback-exporter allows Retrieve Embedded Sensitive Data.This issue affects Jetpack Feedback Exporter: from n/a through <= 1.23.
Explanation of Vulnerability in Simple Terms
Jetpack Feedback Exporter versions 1.23 and earlier expose sensitive information through improper exposure of internal data. An attacker on the network can read limited confidential information without authentication or user interaction. The vulnerability affects the product's data handling mechanisms and may expose feedback or configuration details.
What an attacker can do
Read sensitive information from the affected component without authentication.
Potential impact on your site
Confidential feedback or configuration data may be exposed to unauthenticated attackers.
Conditions required to exploit
Network access to the site; no authentication or user interaction required.
Key dates
External resources
Related vulnerabilities
