PT-2025-7449 · Trenoncourt · Autoqueryable

Alexandru Postolache + 2 · Published 2025-02-20 · Updated 2025-02-21 · CVE-2024-57716

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions trenoncourt AutoQueryable version 1.7.0

Description An issue in trenoncourt AutoQueryable allows a remote attacker to obtain sensitive information via the Unselectable function.

Recommendations For trenoncourt AutoQueryable version 1.7.0, consider disabling the Unselectable function as a temporary workaround until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Information Disclosure

Weakness Enumeration

CWE-200

Related Identifiers

CVE-2024-57716

GHSA-M4MM-534H-5CP5

Affected Products

Autoqueryable

References · 8

• 🔥 https://github.com/pentesttoolscom/vulnerability-research/tree/master/CVE-2024-57716 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2024-57716 · Security Note
• https://osv.dev/vulnerability/CVE-2024-57716 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-m4mm-534h-5cp5 · Vendor Advisory
• https://github.com/trenoncourt/AutoQueryable · Note
• https://t.me/cvenotify/112043 · Telegram Post
• https://twitter.com/CVEnew/status/1892616606905467258 · Twitter Post
• https://t.me/cvedetector/18565 · Telegram Post