CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
What the vulnerability does
Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in ProveSource LTD ProveSource Social Proof provesource allows Retrieve Embedded Sensitive Data.This issue affects ProveSource Social Proof: from n/a through <= 3.1.2.
Explanation of Vulnerability in Simple Terms
ProveSource Social Proof versions 3.1.2 and earlier expose sensitive information through improper access controls. An attacker on the network can read data without authentication or user interaction. The vulnerability allows disclosure of limited confidential information but does not permit modification or service disruption.
What an attacker can do
Read sensitive data from the application without logging in.
Potential impact on your site
Confidential information may be exposed to unauthenticated visitors; integrity and availability are not affected.
Conditions required to exploit
Network access to the application; no authentication or user interaction required.
Key dates
External resources
Related vulnerabilities
