CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
What the vulnerability does
Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in sizam Rehub rehub-theme allows Retrieve Embedded Sensitive Data.This issue affects Rehub: from n/a through <= 19.9.9.1.
Explanation of Vulnerability in Simple Terms
Rehub versions up to 19.9.9.1 expose sensitive information through improper access controls. An attacker on the network can read confidential data without authentication or user interaction. The vulnerability affects the confidentiality of information stored or processed by the application. Update to a version newer than 19.9.9.1 to remediate.
What an attacker can do
Read sensitive information from the application without logging in.
Potential impact on your site
Confidential data may be exposed to unauthorized parties on the internet.
Conditions required to exploit
Network access to the Rehub instance; no authentication required.
Key dates
External resources
