PT-2024-30427 · Mediavine · Create By Mediavine

Peng Zhou

·

CVE-2024-43264

·

Published

2024-08-26

·

Updated

2024-09-12

CVSS v3.1

7.5

High

VectorAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Name of the Vulnerable Software and Affected Versions Create by Mediavine versions 1.9.8 and earlier
Description This issue exposes sensitive information to unauthorized actors. Users are urged to upgrade to the latest version to mitigate risks.
Recommendations For versions 1.9.8 and earlier, upgrade to the latest version to resolve the issue. As a temporary workaround, consider restricting access to sensitive data until the upgrade is applied.

Fix

Information Disclosure

Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com

Weakness Enumeration

CWE-201CWE-200

Related Identifiers

CVE-2024-43264

Affected Products

Create By Mediavine