CVE-2023-50458

In Dradis before 4.11.0, the Output Console shows a job queue that may contain information about other users' jobs.
Configurations

Configuration 1 (hide)

cpe:2.3:a:dradisframework:dradis:*:*:*:*:community:*:*:*

History

07 Nov 2025, 01:03

Type Values Removed Values Added
First Time Dradisframework
Dradisframework dradis
References () https://github.com/dradis/dradis-ce/tags - () https://github.com/dradis/dradis-ce/tags - Release Notes
References () https://securiteam.io/2025/07/03/cve-2023-50458-dradis-information-disclosure-output-console/ - () https://securiteam.io/2025/07/03/cve-2023-50458-dradis-information-disclosure-output-console/ - Third Party Advisory
CPE cpe:2.3:a:dradisframework:dradis:*:*:*:*:community:*:*:*

Information

Published : 2025-07-10 04:15

Updated : 2025-11-07 01:03


NVD link : CVE-2023-50458

Mitre link : CVE-2023-50458

CVE.ORG link : CVE-2023-50458


JSON object : View

Products Affected

dradisframework

  • dradis
CWE
CWE-1230

Exposure of Sensitive Information Through Metadata