CVE-2018-6470
MEDIUMnibbleblog 4.0.5 - Unauthorized Sensitive Information Exposure via .DS_Store Files
Title source: llmDescription
Nibbleblog 4.0.5 on macOS defaults to having .DS_Store in each directory, causing DS_Store information to leak.
References (1)
Core 1
Core References
Third Party Advisory x_refsource_misc
https://github.com/dignajar/nibbleblog/issues/120
Scores
CVSS v3
5.3
EPSS
0.0109
EPSS Percentile
61.2%
Attack Vector
NETWORK
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Details
CWE
CWE-200
Status
published
Products (1)
nibbleblog/nibbleblog
4.0.5
Published
Feb 01, 2018
Tracked Since
Feb 18, 2026