CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
What the vulnerability does
Insertion of Sensitive Information Into Sent Data vulnerability in Logtivity Activity Logs Activity Logs, User Activity Tracking, Multisite Activity Log from Logtivity allows Retrieve Embedded Sensitive Data. This issue affects Activity Logs, User Activity Tracking, Multisite Activity Log from Logtivity: from n/a through 3.3.6.
Explanation of Vulnerability in Simple Terms
Logtivity Activity Logs versions up to 3.3.6 expose sensitive activity log data without proper access controls. An unauthenticated attacker can read activity logs over the network without needing to interact with a user or have special privileges. The vulnerability allows disclosure of logged user actions and site events that should be restricted to administrators.
What an attacker can do
Read activity logs and user tracking data without authentication.
Potential impact on your site
Sensitive activity logs and user behavior data exposed to anyone on the internet.
Conditions required to exploit
Network access only; no authentication or user interaction required.
Key dates
External resources
Related vulnerabilities
