CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
What the vulnerability does
Insertion of Sensitive Information Into Sent Data vulnerability in themeglow JobBoard Job listing job-board-light allows Retrieve Embedded Sensitive Data.This issue affects JobBoard Job listing: from n/a through <= 1.2.8.
Explanation of Vulnerability in Simple Terms
JobBoard Job Listing versions up to 1.2.8 contain an information disclosure vulnerability that allows attackers to read sensitive data without authentication. The vulnerability requires specific network conditions to exploit but does not require user interaction. No integrity or availability impact occurs. Update to a version newer than 1.2.8 to remediate.
What an attacker can do
Read sensitive information from the site without logging in.
Potential impact on your site
Sensitive data may be exposed to unauthenticated attackers, potentially including user information or configuration details.
Conditions required to exploit
Network access to the site; specific conditions must be met to trigger the vulnerability.
Key dates
External resources
