PT-2018-17567 · Nibbleblog · Nibbleblog

Publicado 2018-02-01 · Atualizado 2021-09-08 · CVE-2018-6470

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Média

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions Nibbleblog version 4.0.5

Description The issue causes DS Store information to leak due to .DS Store files being present in each directory by default on macOS.

Recommendations For Nibbleblog version 4.0.5, consider removing or restricting access to .DS Store files to minimize the risk of information leakage.

Correção

Information Disclosure

Enumeração de Fraquezas

CWE-200

Identificadores relacionados

CVE-2018-6470

Produtos afetados

Nibbleblog

Referências · 3

• https://github.com/dignajar/nibbleblog/issues/120 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2018-6470 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2018-6470 · Aviso do Fabricante