Transmission of Private Resources into a New Sphere
CWE-402
The product makes resources available to untrusted parties when those resources are only intended to be accessed by the product.
We track 7 vulnerabilities of this type. 100% are rated high or critical, and the average CVSS score is 7.9.
Latest Transmission of Private Resources into a New Sphere vulnerabilities
- 7.5 High severity
myhoard: Transmission of Private Resources into a New Sphere
MyHoard is a daemon for creating, managing and restoring MySQL backups. Starting in version 1.0.1 and prior to version 1.3.0, in some cases, myhoard logs the whole backup info, including the encryption key. Version 1.3.0 fixes the issue. As a workaround, direc
- 8.2 High severity
django-select2: Transmission of Private Resources into a New Sphere
Django-Select2 is a Django integration for Select2. Prior to version 8.4.1, instances of HeavySelect2Mixin subclasses like the ModelSelect2MultipleWidget and ModelSelect2Widget can leak secret access tokens across requests. This can allow users to access restr
- 8.1 High severity
Zammad: Transmission of Private Resources into a New Sphere
In Zammad 6.4.x before 6.4.2, there is information exposure. Only agents should be able to see and work on shared article drafts. However, a logged in customer was able to see details about shared drafts for their customer tickets in the browser console, which
- 9.1 Critical severity
CrafterCMS: Transmission of Private Resources into a New Sphere
Transmission of Private Resources into a New Sphere ('Resource Leak') vulnerability in CrafterCMS Engine on Linux, MacOS, x86, Windows, 64 bit, ARM allows Directory Indexing, Resource Leak Exposure.This issue affects CrafterCMS: from 4.0.0 before 4.0.8, from 4
- 7.5 High severity
packager: Transmission of Private Resources into a New Sphere
Electron Packager bundles Electron-based application source code with a renamed Electron executable and supporting files into folders ready for distribution. A random segment of ~1-10kb of Node.js heap memory allocated either side of a known buffer will be lea
- 7.5 High severity
Red Hat OpenStack Platform 13.0 - ELS: Transmission of Private Resources into a New Sphere
An information leak was found in OpenStack's undercloud. This flaw allows unauthenticated, remote attackers to inspect sensitive data after discovering the IP address of the undercloud, possibly leading to compromising private information, including administra
- 7.5 High severity
xwiki-platform: Exposure of Resource to Wrong Sphere
XWiki Platform is a generic wiki platform. Starting in version 3.5-milestone-1 and prior to versions 14.4.8, 14.10.4, and 15.0-rc-1, the mail obfuscation configuration was not fully taken into account. While the mail displayed to the end user was obfuscated, t