Sensitive Information Exposure in Thomas Maier Image Source Control Lite
CVE-2023-52187

5.3MEDIUM

Key Information:

Vendor

WordPress
Status
Image Source Control Lite – Show Image Credits And Captions
Vendor
CVE Published:
27 January 2024

What is CVE-2023-52187?

The Image Source Control Lite – Show Image Credits and Captions plugin by Thomas Maier includes a vulnerability that allows unauthorized actors to access sensitive information. The issue arises from improper handling of log files, which can inadvertently expose confidential data to users without sufficient permissions. This vulnerability impacts all versions leading up to 2.17.0, necessitating prompt action to ensure the integrity and confidentiality of sensitive information. Implementing best practices in data handling can mitigate risks associated with this vulnerability.

Affected Version(s)

Image Source Control Lite – Show Image Credits and Captions <= 2.17.0

References

https://patchstack.com/database/vulnerability/image-sourc...
vdb-entry

CVSS V3.1

Score:
5.3
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
None
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

.