CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
What the vulnerability does
Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Roland Beaussant Audio Editor & Recorder audio-editor-recorder allows Retrieve Embedded Sensitive Data.This issue affects Audio Editor & Recorder: from n/a through <= 2.2.3.
Explanation of Vulnerability in Simple Terms
Audio Editor & Recorder versions 2.2.3 and earlier expose sensitive information through network access without authentication. An attacker can read confidential data by sending network requests to the affected application. No user interaction or special privileges are required. Update to a version newer than 2.2.3 to resolve this issue.
What an attacker can do
Read sensitive information from the application over the network without authentication.
Potential impact on your site
If this application is deployed on your site, attackers can access confidential data without logging in.
Conditions required to exploit
Network access to the affected application; no authentication or user interaction required.
Key dates
External resources
