CVE-2024-48310

HIGH

AutoLib Software Systems OPAC <20.10 - Info Disclosure

Title source: llm
STIX 2.1

Description

AutoLib Software Systems OPAC v20.10 was discovered to have multiple API keys exposed within the source code. Attackers may use these keys to access the backend API or other sensitive information.

References (2)

Core 2

Scores

CVSS v3 7.5
EPSS 0.0051
EPSS Percentile 39.4%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

CISA SSVC

Vulnrichment
Exploitation none
Automatable yes
Technical Impact partial

Details

CWE
CWE-200
Status published
Published Jan 28, 2025
Tracked Since Feb 18, 2026