PT-2024-39108 · Unknown · Erjemin Roll Cms

Zihe · Published 2024-09-08 · Updated 2024-09-11 · CVE-2024-8571

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions: erjemin roll cms up to 1484fe2c4e0805946a7bcf46218509fcb34883a9

Description: A vulnerability was found in erjemin roll cms, which has been classified as problematic. This affects an unknown part of the file roll cms/roll cms/views.py. The manipulation leads to information exposure through error message. The product takes the approach of rolling releases to provide continuous delivery, and therefore, version details for affected and updated releases are not available.

Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Generation of Error Message Containing Sensitive Information

Weakness Enumeration

CWE-209

Related Identifiers

CVE-2024-8571

Affected Products

Erjemin Roll Cms

References · 11

• https://nvd.nist.gov/vuln/detail/CVE-2024-8571 · Security Note
• https://osv.dev/vulnerability/CVE-2024-8571 · Vendor Advisory
• https://vuldb.com/?id.276801 · Note
• https://twitter.com/CVEnew/status/1832688182455881835 · Twitter Post
• https://vuldb.com/?submit.400796 · Note
• https://twitter.com/VulmonFeeds/status/1832729696355635325 · Twitter Post
• https://t.me/cvenotify/94211 · Telegram Post
• https://vuldb.com/?ctiid.276801 · Note
• https://t.me/cvedetector/5076 · Telegram Post
• https://t.me/cvenotify/93733 · Telegram Post
• https://github.com/erjemin/roll_cms/issues/1 · Note