Information Leak Vulnerability in PublicCMS by JinYiTong
CVE-2022-29784

5.3MEDIUM

Key Information:

Vendor

Publiccms

Status
Publiccms
Vendor
CVE Published:
3 June 2022

What is CVE-2022-29784?

PublicCMS versions up to V4.0.202204.a are susceptible to an information leak through a specific component, /views/directive/sys/SysConfigDataDirective.java. This vulnerability may expose sensitive configuration data, which could be exploited by malicious actors to gain unauthorized access to critical information and potentially compromise the integrity of the system. It is essential for users to be aware of this risk and to implement security measures to mitigate possible threats.

References

https://github.com/JinYiTong/CVE-Req/blob/main/publiccms/...
x_refsource_MISC
https://github.com/sanluan/PublicCMS/commit/d8d7626cf51e4...
x_refsource_MISC

CVSS V3.1

Score:
5.3
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
None
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.