CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
What the vulnerability does
Insertion of Sensitive Information Into Sent Data vulnerability in Efí Bank Gerencianet Oficial woo-gerencianet-official allows Retrieve Embedded Sensitive Data.This issue affects Gerencianet Oficial: from n/a through <= 3.1.3.
Explanation of Vulnerability in Simple Terms
Gerencianet Oficial versions up to 3.1.3 expose sensitive information through an information disclosure vulnerability. An attacker on the network can read limited confidential data without authentication or user interaction. The vulnerability affects the payment processing component and may expose transaction or account details. Update to a version newer than 3.1.3 to remediate.
What an attacker can do
Read sensitive information from the payment system without logging in.
Potential impact on your site
Customer payment data or account information may be exposed to unauthenticated attackers.
Conditions required to exploit
Network access to the affected Gerencianet Oficial installation; no authentication required.
Key dates
External resources
Related vulnerabilities
