Description (CNA)
In Dradis before 4.11.0, the Output Console shows a job queue that may contain information about other users' jobs.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| dradisframework / Dradis | affected 0 before 4.11.0 |
CWE
CWE-1230
References
- https://github.com/dradis/dradis-ce/tags
- https://securiteam.io/2025/07/03/cve-2023-50458-dradis-information-disclosure-output-console/
ADP enrichment
No English description supplied.
No references supplied.