CVE-2024-38516CWE-1295

Aimeos HTML client may potentially reveal sensitive information in error log

High · published June 25, 2024

CVSS v3.1
8.8
EPSS
1%
Percentile
42.7
In the wild
Unconfirmed
What it is

ai-client-html is an Aimeos e-commerce HTML client component. Debug information revealed sensitive information from environment variables in error log. This issue has been patched in versions 2024.04.7, 2023.10.15, 2022.10.13 and 2021.10.22.

The record
Technical detail
CVSS v3.1
8.8 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00510 · 42.7th percentile
Weakness
CWE-1295 · Debug Messages Revealing Unnecessary Information
Published
2024-06-25T20:08Z
EPSS history
Timeline
  • 25 JUN 20:08Z
    Aimeos HTML client may potentially reveal sensitive information in error log
    cvelistv5