PT-2018-17567 · Nibbleblog · Nibbleblog

Published 2018-02-01 · Updated 2021-09-08 · CVE-2018-6470

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions Nibbleblog version 4.0.5

Description The issue causes DS Store information to leak due to .DS Store files being present in each directory by default on macOS.

Recommendations For Nibbleblog version 4.0.5, consider removing or restricting access to .DS Store files to minimize the risk of information leakage.

Fix

Information Disclosure

Weakness Enumeration

CWE-200

Related Identifiers

CVE-2018-6470

Affected Products

Nibbleblog

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2018-6470 · Security Note
• https://osv.dev/vulnerability/CVE-2018-6470 · Vendor Advisory
• https://github.com/dignajar/nibbleblog/issues/120 · Note