CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
What the vulnerability does
Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Vikas Ratudi VPSUForm v-form allows Retrieve Embedded Sensitive Data.This issue affects VPSUForm: from n/a through <= 3.2.24.
Explanation of Vulnerability in Simple Terms
VPSUForm versions 3.2.24 and earlier contain an exposure of sensitive information vulnerability. An attacker with low-level user privileges can read confidential data that should be restricted. The vulnerability requires network access and valid user credentials but no additional user interaction. Update to a version newer than 3.2.24 to remediate.
What an attacker can do
Read sensitive data they should not have access to.
Potential impact on your site
Confidential information may be exposed to authenticated users with limited permissions.
Conditions required to exploit
Valid user account with low-level privileges; network access to the application.
Key dates
External resources
