CVE-2023-4168CWE-200

Templatecookie Adlisting Redirect ad-list information disclosure

Medium · published August 5, 2023

CVSS v3.1

4.3

EPSS

46%

Percentile

98.8

In the wild

Unconfirmed

What it is

A vulnerability was found in Templatecookie Adlisting 2.14.0. It has been classified as problematic. Affected is an unknown function of the file /ad-list of the component Redirect Handler. The manipulation leads to information disclosure. It is possible to launch the attack remotely. The identifier of this vulnerability is VDB-236184. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.

The record

Technical detail

CVSS v3.1: 4.3 · MEDIUM
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
CVSS v4.0: Not supplied
EPSS: 0.45972 · 98.8th percentile
Weakness: CWE-200 · Exposure of Sensitive Information to an Unauthorized Actor
Published: 2023-08-05T17:31Z

EPSS history

Timeline

05 AUG 17:31Z
Templatecookie Adlisting Redirect ad-list information disclosure
cvelistv5