CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
What the vulnerability does
Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Virusdie Virusdie virusdie allows Retrieve Embedded Sensitive Data.This issue affects Virusdie: from n/a through <= 1.1.6.
Explanation of Vulnerability in Simple Terms
Virusdie versions 1.1.6 and earlier expose sensitive information to authenticated users. An attacker with low-level account access can read data they should not have permission to view. The vulnerability requires valid login credentials and affects confidentiality but not data integrity or availability.
What an attacker can do
Read sensitive information they lack authorization to access.
Potential impact on your site
Authenticated users can view confidential data beyond their permission level; data breach risk for sensitive information.
Conditions required to exploit
Valid user account with low-level privileges; network access to the application.
Key dates
External resources
