CVE-2024-8571 | BDVDB-2026-247692 Detail

erjeminroll_cms

Description#

A vulnerability was found in erjemin roll_cms up to 1484fe2c4e0805946a7bcf46218509fcb34883a9. It has been classified as problematic. This affects an unknown part of the file roll_cms/roll_cms/views.py. The manipulation leads to information exposure through error message. This product takes the approach of rolling releases to provide continious delivery. Therefore, version details for affected and updated releases are not available.

Impact#

Per CVSS v3.1: confidentiality impact low, integrity impact none, availability impact none. Attack vector: adjacent.

Weaknesses#

CWE-209 Information Exposure Through Error Message

References#

Exploit#

No public exploit known

History#

Version 12024-09-08Record published in the CVE List.
Version 22024-09-09Most recent update recorded in the CVE List.

Published

Published: 2024-09-08
Last modified: 2024-09-09

Vendor information

Vendor: erjemin
Product: roll_cms

All erjemin vulnerabilities

Score

3.5 Low

EPSS

less than 1%, Very Low

Estimated chance of exploitation in the next 30 days. EPSS percentile: 38.9.

KEV

Not listed in the CISA Known Exploited Vulnerabilities catalog.

Impact

Not classified

Action

No specific action is recorded in the source data. Check the references for vendor guidance.

Affected Systems

Vulnerable
1484fe2c4e0805946a7bcf46218509fcb34883a9
Fixed
Not stated

Scoring System

CVSS v4.0

5.1 Medium

CVSS:4.0/AV:A/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N

Metric breakdown
Attack Vector	Adjacent
Attack Complexity	Low
Attack Requirements	None
Privileges Required	Low
User Interaction	None
Vulnerable System Confidentiality	Low
Vulnerable System Integrity	None
Vulnerable System Availability	None
Subsequent System Confidentiality	None
Subsequent System Integrity	None
Subsequent System Availability	None

CVSS v3.1

3.5 Low

CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Metric breakdown
Attack Vector	Adjacent
Attack Complexity	Low
Privileges Required	Low
User Interaction	None
Scope	Unchanged
Confidentiality	Low
Integrity	None
Availability	None

CVSS v3.0

3.5 Low

CVSS:3.0/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Metric breakdown
Attack Vector	Adjacent
Attack Complexity	Low
Privileges Required	Low
User Interaction	None
Scope	Unchanged
Confidentiality	Low
Integrity	None
Availability	None

CVSS v2

2.7 Low

AV:A/AC:L/Au:S/C:P/I:N/A:N

Metric breakdown
Access Vector	Adjacent Network
Access Complexity	Low
Authentication	Single
Confidentiality Impact	Partial
Integrity Impact	None
Availability Impact	None

Source: CVE List v5 (record); CISA KEV (kev, action); FIRST EPSS (epss).