Sensitive Data Exposure in Stacks Mobile App Builder by Stacks
CVE-2024-50528

7.5HIGH

Key Information:

Vendor

WordPress

Vendor
CVE Published:
4 November 2024

What is CVE-2024-50528?

The Stacks Mobile App Builder is affected by a vulnerability that exposes sensitive system information to unauthorized access. This flaw allows attackers to retrieve embedded sensitive data, presenting a significant security risk for applications built using this platform. The issue impacts all versions of the Stacks Mobile App Builder up to 5.2.3, emphasizing the need for immediate attention to protect sensitive information from potential exposure.

Affected Version(s)

Stacks Mobile App Builder 0 <= 5.2.3

References

CVSS V3.1

Score:
7.5
Severity:
HIGH
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

.