CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
What the vulnerability does
Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Themefic Instantio instantio allows Retrieve Embedded Sensitive Data.This issue affects Instantio: from n/a through <= 3.3.30.
Explanation of Vulnerability in Simple Terms
Instantio versions up to 3.3.30 expose sensitive information through improper access controls. An attacker on the network can read non-public data without authentication or user interaction. The vulnerability has a CVSS score of 5.3 (medium). Update to version 3.3.31 or later to remediate.
What an attacker can do
Read sensitive information from the application without logging in.
Potential impact on your site
Confidential data may be exposed to unauthenticated visitors.
Conditions required to exploit
Network access to the application; no authentication required.
Key dates
External resources
Related vulnerabilities
