CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
What the vulnerability does
Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in magepeopleteam Bus Ticket Booking with Seat Reservation bus-ticket-booking-with-seat-reservation allows Retrieve Embedded Sensitive Data.This issue affects Bus Ticket Booking with Seat Reservation: from n/a through < 5.6.5.
Explanation of Vulnerability in Simple Terms
Bus Ticket Booking with Seat Reservation versions up to 5.6.5 contain an exposure of sensitive information vulnerability. An authenticated user with low privileges can read data they should not have access to. The vulnerability requires network access and no user interaction. Update to a version newer than 5.6.5 to remediate.
What an attacker can do
Read sensitive data belonging to other users or the system.
Potential impact on your site
Authenticated users can access confidential information they shouldn't see, risking data exposure.
Conditions required to exploit
Attacker must be authenticated with a low-privilege account; network access required.
Key dates
External resources
Related vulnerabilities
