CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
What the vulnerability does
Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in opicron Image Cleanup image-cleanup allows Retrieve Embedded Sensitive Data.This issue affects Image Cleanup: from n/a through <= 1.9.2.
Explanation of Vulnerability in Simple Terms
Image Cleanup versions 1.9.2 and earlier expose sensitive information through improper exposure of internal data. An attacker on the network can read non-public information without authentication or user interaction. The vulnerability has a CVSS score of 5.3, indicating moderate risk to confidentiality.
What an attacker can do
Read sensitive information from the application without authentication.
Potential impact on your site
Sensitive data may be exposed to unauthenticated attackers, potentially including configuration or user information.
Conditions required to exploit
Network access to the application; no authentication or user interaction required.
Key dates
External resources
