Unauthorized Access to Sensitive Information Through Lack of Proper Constraints

CVE-2024-38760

5.3MEDIUM

Key Information

Vendor: David Maucher
Status: Send Users Email
Vendor: CVE Published:; 13 August 2024

Summary

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in David Maucher Send Users Email allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Send Users Email: from n/a through 1.5.1.

Affected Version(s)

Send Users Email <= 1.5.1

CVSS V3.1

Score:

5.3

Severity:

MEDIUM

Confidentiality:

Low

Integrity:

None

Availability:

None

Attack Vector:

Network

Attack Complexity:

Low

Privileges Required:

None

User Interaction:

None

Scope:

Unchanged

Timeline

Vulnerability published.
Aug 13, 2024
Vulnerability Reserved.
Jun 19, 2024

Collectors

NVD DatabaseMitre Database

Credit

Joshua Chan (Patchstack Alliance)