CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
What the vulnerability does
Insertion of Sensitive Information Into Sent Data vulnerability in Themeisle Otter - Gutenberg Block otter-blocks allows Retrieve Embedded Sensitive Data.This issue affects Otter - Gutenberg Block: from n/a through <= 3.1.0.
Explanation of Vulnerability in Simple Terms
Otter - Gutenberg Block versions up to 3.1.0 expose sensitive information through improper access controls. An unauthenticated attacker can read confidential data by making network requests to the plugin. No user interaction is required. Site administrators should update to a version newer than 3.1.0 as soon as possible.
What an attacker can do
Read sensitive information from the site without authentication.
Potential impact on your site
Confidential data may be exposed to anyone on the internet without your knowledge.
Conditions required to exploit
Network access only; no authentication or user interaction required.
Key dates
External resources
