CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
What the vulnerability does
Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Crocoblock JetReviews jet-reviews allows Retrieve Embedded Sensitive Data.This issue affects JetReviews: from n/a through <= 3.0.1.
Explanation of Vulnerability in Simple Terms
JetReviews versions 3.0.1 and earlier expose sensitive information through improper access controls. An attacker can read data that should be restricted without authentication. The vulnerability affects all installations and requires no user interaction to exploit.
What an attacker can do
Read sensitive data that should be restricted from public access.
Potential impact on your site
Confidential information may be exposed to unauthenticated visitors without your knowledge.
Conditions required to exploit
Network access only; no authentication or user interaction required.
Key dates
External resources
Related vulnerabilities
