PT-2023-10191 · Sumocoders · Sumocoders Frameworkuserbundle

CVE-2015-10012

·

Publicado

2023-01-03

·

Atualizado

2024-08-06

CVSS v3.1

7.5

Alta

VetorAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Name of the Vulnerable Software and Affected Versions sumocoders FrameworkUserBundle versions up to 1.3.x
Description A vulnerability was found in sumocoders FrameworkUserBundle, affecting some unknown functionality of the file Resources/views/Security/login.html.twig. The manipulation leads to information exposure through error message.
Recommendations For sumocoders FrameworkUserBundle versions up to 1.3.x, upgrade to version 1.4.0 to address this issue.

Correção

Generation of Error Message Containing Sensitive Information

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-209

Identificadores relacionados

CVE-2015-10012
GHSA-6M7C-45FF-3328

Produtos afetados

Sumocoders Frameworkuserbundle