CVE-2023-1974
Exposure of Sensitive Information Through Metadata in answerdev/answer
In short
The Answer application before version 1.0.8 leaks sensitive information through file metadata, allowing unauthorized users to discover details that should remain hidden. This can expose configuration data, internal paths, or other confidential information embedded in files.
Technical detail
CWE-1230 describes improper exposure of sensitive information through metadata in file systems or archives. In answer prior to 1.0.8, metadata attributes (timestamps, internal identifiers, or embedded comments) in served files may be accessible to unauthenticated attackers, leading to information disclosure without requiring special privileges or user interaction.
Summary generated and translated by AI from the official description.
Exposure of Sensitive Information Through Metadata in GitHub repository answerdev/answer prior to 1.0.8.
CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H
Affected products
answerdev · answerdev/answerWant to know if your infrastructure is exposed to this?
Talk to TrueHacking →