CVE-2024-3928CWE-200

Dromara open-capacity-platform auth-server heapdump information disclosure

Medium · published April 17, 2024

CVSS v3.1
4.3
EPSS
1%
Percentile
43.8
In the wild
Unconfirmed
What it is

A vulnerability was found in Dromara open-capacity-platform 2.0.1. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /actuator/heapdump of the component auth-server. The manipulation leads to information disclosure. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-261367.

The record
Technical detail
CVSS v3.1
4.3 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00527 · 43.8th percentile
Weakness
CWE-200 · Exposure of Sensitive Information to an Unauthorized Actor
Published
2024-04-17T23:31Z
EPSS history
Timeline
  • 17 APR 23:31Z
    Dromara open-capacity-platform auth-server heapdump information disclosure
    cvelistv5