CVE-2024-8571: erjemin roll cms

csirt@kutim:~/threat-intel/cve/CVE-2024-8571

CVSS 5.3 · Medium EPSS 0,44%

Kerentanan Generation of Error Message Containing Sensitive Information pada erjemin roll cms. Skor CVSS 3.1 5.3 (Medium) menurut NVD.

Deskripsi (NVD)

A vulnerability was found in erjemin roll_cms up to 1484fe2c4e0805946a7bcf46218509fcb34883a9. It has been classified as problematic. This affects an unknown part of the file roll_cms/roll_cms/views.py. The manipulation leads to information exposure through error message. This product takes the approach of rolling releases to provide continious delivery. Therefore, version details for affected and updated releases are not available.

Rincian

Terbit di NVD: 8 September 2024
Terakhir diubah: 17 Juni 2026
Status NVD: Analyzed
CVSS 3.1: 5.3 (Medium), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N · uraikan di kalkulator
Jenis kelemahan (CWE): CWE-209: Generation of Error Message Containing Sensitive Information
EPSS (30 hari): 0,44% peluang dieksploitasi; lebih tinggi dari 36,8% CVE lain

Produk dan versi terdampak

Vendor	Produk	Versi terdampak
erjemin	roll cms	Semua versi sebelum 2024-08-31

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

https://vuldb.com/?id.276801 advisory pihak ketiga · vdb entry
https://vuldb.com/?submit.400796 advisory pihak ketiga · vdb entry
https://github.com/erjemin/roll_cms/issues/1 issue tracking
https://vuldb.com/?ctiid.276801 permissions required

Sumber: NVD · CVE.org · EPSS. Halaman ini disusun otomatis dari data tersebut; pembaruan terakhir 5 Okt 2026, 20:11 WITA. Kalau sistem di Perangkat Daerah memakai produk ini dan butuh bantuan, laporkan lewat kanal pelaporan.