CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
What the vulnerability does
Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in bannersky BSK PDF Manager bsk-pdf-manager allows Retrieve Embedded Sensitive Data.This issue affects BSK PDF Manager: from n/a through <= 3.7.2.
Explanation of Vulnerability in Simple Terms
BSK PDF Manager versions 3.7.2 and earlier contain an integrity vulnerability that allows unauthenticated attackers to modify data over the network. The vulnerability requires no user interaction and can be exploited remotely. Site administrators should update to a version newer than 3.7.2 to remediate this issue.
What an attacker can do
Modify data or content on the site without authentication.
Potential impact on your site
Unauthorized changes to PDF manager data or configuration without warning or audit trail.
Conditions required to exploit
Network access only; no authentication or user interaction required.
Key dates
External resources
Related vulnerabilities
