CVE-2023-33181CWE-209

Sensitive Information Disclosure abusing Stack Trace in Xibo CMS

Medium · published May 30, 2023

CVSS v3.1
4.3
EPSS
1%
Percentile
44.5
In the wild
Unconfirmed
What it is

Xibo is a content management system (CMS). Starting in version 3.0.0 and prior to version 3.3.5, some API routes will print a stack trace when called with missing or invalid parameters revealing sensitive information about the locations of paths that the server is using. Users should upgrade to version 3.3.5, which fixes this issue. There are no known workarounds aside from upgrading.

The record
Technical detail
CVSS v3.1
4.3 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00538 · 44.5th percentile
Weakness
CWE-209 · Generation of Error Message Containing Sensitive Information
Published
2023-05-30T20:57Z
EPSS history
Timeline
  • 30 MAY 20:57Z
    Sensitive Information Disclosure abusing Stack Trace in Xibo CMS
    cvelistv5