CVE-2026-22645CWE-200

The application discloses all used components, versions and license information to unauthenticated actors, giving attackers the opportunity to target known…

Medium · published January 15, 2026

CVSS v3.1
5.3
EPSS
0%
Percentile
38.1
In the wild
Unconfirmed
What it is

The application discloses all used components, versions and license information to unauthenticated actors, giving attackers the opportunity to target known security vulnerabilities of used components.

The record
Technical detail
CVSS v3.1
5.3 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00450 · 38.1th percentile
Weakness
CWE-200 · Exposure of Sensitive Information to an Unauthorized Actor
Published
2026-01-15T13:14Z
EPSS history
Timeline
  • 15 JAN 13:14Z
    The application discloses all used components, versions and license information to unauthenticated actors, giving attackers the opportunity to target known…
    cvelistv5