CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
What the vulnerability does
Insertion of Sensitive Information Into Sent Data vulnerability in Metagauss EventPrime eventprime-event-calendar-management allows Retrieve Embedded Sensitive Data.This issue affects EventPrime: from n/a through <= 4.2.4.1.
Explanation of Vulnerability in Simple Terms
EventPrime versions up to 4.2.4.1 contain an information disclosure vulnerability. An attacker with low-level user privileges can read sensitive data they should not have access to. The vulnerability requires network access and valid user credentials but no additional user interaction. Update to a version newer than 4.2.4.1 to remediate.
What an attacker can do
Read sensitive information they should not have access to.
Potential impact on your site
User data or system information may be exposed to authenticated users with limited permissions.
Conditions required to exploit
Valid user account with low-level privileges; network access to the application.
Key dates
External resources
Related vulnerabilities
