CVE-2026-7071CWE-200CWE-538

CodeAstro Online Job Portal user-cvs file information disclosure

Medium · published April 27, 2026

CVSS v4.0
6.9
EPSS
1%
Percentile
42.6
In the wild
Unconfirmed
What it is

A security vulnerability has been detected in CodeAstro Online Job Portal 1.0. Affected by this vulnerability is an unknown functionality of the file /users/user-cvs/. The manipulation leads to file and directory information exposure. Remote exploitation of the attack is possible. The exploit has been disclosed publicly and may be used.

The record
Technical detail
CVSS v4.0
6.9 · MEDIUM
Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:P
EPSS
0.00510 · 42.6th percentile
Weaknesses
CWE-200 · Exposure of Sensitive Information to an Unauthorized Actor; CWE-538 · Insertion of Sensitive Information into Externally-Accessible File or Directory
Published
2026-04-27T00:30Z
EPSS history
Timeline
  • 27 APR 00:30Z
    CodeAstro Online Job Portal user-cvs file information disclosure
    cvelistv5