CVE-2024-48310

CVSS 7.5 HIGHEPSS 0.5%CWE-200

Vexday Risk Score

21Bajo

Decisión SSVC (CISA)

Track

Sin señal de explotación → monitorear

CVSS 7.5EPSS 0.5%KEV nãoPoC —Nuclei —Metasploit —Patch —

Ciclo de vida

28 ene 2025Publicada en NVD

Recomendación: Monitorear — sin señal de explotación por ahora.

AutoLib Software Systems OPAC v20.10 was discovered to have multiple API keys exposed within the source code. Attackers may use these keys to access the backend API or other sensitive information.

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Productos afectados

n/a · n/a

Referencias

http://seclists.org/fulldisclosure/2025/Jan/11 https://seclists.org/fulldisclosure/2025/Jan/11