CVE-2024-3928

MEDIUM

Dromara open-capacity-platform 2.0.1 - Info Disclosure

Title source: llm
STIX 2.1

Description

A vulnerability was found in Dromara open-capacity-platform 2.0.1. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /actuator/heapdump of the component auth-server. The manipulation leads to information disclosure. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-261367.

References (4)

Core 4
Core References
Permissions Required, VDB Entry vdb-entry
https://vuldb.com/?id.261367
Permissions Required, VDB Entry signature permissions-required
https://vuldb.com/?ctiid.261367
Permissions Required, VDB Entry third-party-advisory
https://vuldb.com/?submit.313847

Scores

CVSS v3 4.3
EPSS 0.0006
EPSS Percentile 19.1%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

CISA SSVC

Vulnrichment
Exploitation poc
Automatable no
Technical Impact partial

Details

CWE
CWE-200
Status published
Products (1)
Dromara/open-capacity-platform 2.0.1
Published Apr 18, 2024
Tracked Since Feb 18, 2026