CVE-2024-22200

Katalog CVE

CVSS 5.3 · Medium EPSS 0,34%

Kerentanan Exposure of Sensitive Information to an Unauthorized Actor pada vantage6-ui. Skor CVSS 3.1 5.3 (Medium) menurut NVD.

Deskripsi (NVD)

vantage6-UI is the User Interface for vantage6. The docker image used to run the UI leaks the nginx version. To mitigate the vulnerability, users can run the UI as an angular application. This vulnerability was patched in 4.2.0.

Rincian

Terbit di NVD

30 Januari 2024

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

5.3 (Medium), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-200: Exposure of Sensitive Information to an Unauthorized Actor

EPSS (30 hari)

0,34% peluang dieksploitasi; lebih tinggi dari 25,0% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://github.com/vantage6/vantage6-UI/security/advisories/GHSA-8wxq-346h-xmr8 advisory vendor
• https://github.com/vantage6/vantage6-UI/commit/92e0fb5102b544d5bcc23980d973573733e2e020 patch