PT-2026-93692 · A2Ui · A2Ui
CVSS v4.0
5.3
Medium
| Vector | AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X |
Name of the Vulnerable Software and Affected Versions
a2ui-project a2ui versions 0.8 through 1.0
Description
A remote information disclosure issue exists within the Model Processor component, specifically in the
model-processor.ts file. The flaw occurs when the current[segment] argument is manipulated, allowing an attacker to expose sensitive information.Recommendations
Deploy the patch identified as 1b3bff234661ce922cbc3771be642b23ec9fd0fa for versions 0.8 through 1.0.
Exploit
Fix
Improper Access Control
Information Disclosure
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
A2Ui