PT-2024-28045
CVE-2024-38516
·
تاريخ النشر
2024-06-25
·
تاريخ التحديث
2024-06-26
الوصف من
CVSS 3.1
8.8
عاليةالمقاييسAV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
ai-client-html versions prior to 2024.04.7
ai-client-html versions prior to 2023.10.15
ai-client-html versions prior to 2022.10.13
ai-client-html versions prior to 2021.10.22
Description
The issue concerns debug information revealing sensitive information from environment variables in error logs. This affects Laravel environments with multi-vendor setups and admin access for the vendors.
Recommendations
For versions prior to 2024.04.7, update to version 2024.04.7 to resolve the issue.
For versions prior to 2023.10.15, update to version 2023.10.15 to resolve the issue.
For versions prior to 2022.10.13, update to version 2022.10.13 to resolve the issue.
For versions prior to 2021.10.22, update to version 2021.10.22 to resolve the issue.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾