PT-2026-93692 · A2Ui · A2Ui
CVSS v4.0
5.3
متوسطة
| المتجه | AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X |
Name of the Vulnerable Software and Affected Versions
a2ui-project a2ui versions 0.8 through 1.0
Description
A remote information disclosure issue exists within the Model Processor component, specifically in the
model-processor.ts file. The flaw occurs when the current[segment] argument is manipulated, allowing an attacker to expose sensitive information.Recommendations
Deploy the patch identified as 1b3bff234661ce922cbc3771be642b23ec9fd0fa for versions 0.8 through 1.0.
استغلال
إصلاح
Information Disclosure
Improper Access Control
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾
المعرّفات ذات الصلة
المنتجات المتأثرة
A2Ui