CVE-2024-38516

HIGH Year: 2024
CVSS v3 Score
8.8
High
Weakness Type
CWE-1295
View all →

Vulnerability Description

ai-client-html is an Aimeos e-commerce HTML client component. Debug information revealed sensitive information from environment variables in error log. This issue has been patched in versions 2024.04.7, 2023.10.15, 2022.10.13 and 2021.10.22.

Related Vulnerabilities

CVE-2023-4215

HIGH
CVSS:7.5(High)

Advantech WebAccess version 9.1.3 contains an exposure of sensitive information to an unauthorized actor vulnerability that could leak user credentials.

CWE-12952023

CVE-2023-5392

HIGH
CVSS:7.5(High)

C300 information leak due to an analysis feature which allows extracting more memory over the network than required by the function. Honeywell recommends updating to the most recent version of the pro...

CWE-12952023

CVE-2024-45784

HIGH
CVSS:7.5(High)

Apache Airflow versions before 2.10.3 contain a vulnerability that could expose sensitive configuration variables in task logs. This vulnerability allows DAG authors to unintentionally or intentionall...

CWE-12952024

CVE-2025-31001

HIGH
CVSS:7.5(High)

Debug Messages Revealing Unnecessary Information vulnerability in TLA Media GTM Kit allows Retrieve Embedded Sensitive Data. This issue affects GTM Kit: from n/a through 2.3.1.

CWE-12952025

CVE-2023-4215

HIGH
CVSS:7.5(High)

Advantech WebAccess version 9.1.3 contains an exposure of sensitive information to an unauthorized actor vulnerability that could leak user credentials.

CWE-12952023

CVE-2023-5392

HIGH
CVSS:7.5(High)

C300 information leak due to an analysis feature which allows extracting more memory over the network than required by the function. Honeywell recommends updating to the most recent version of the pro...

CWE-12952023