Description

The language file parsing process could be manipulated to expose environment variables. Environment variables might contain sensible information.

Remediation

References

CVE-2023-40626

Related Vulnerabilities

WordPress Plugin Profiles 'bio-img.php' SQL Injection (2.0RC1)

Apache Traffic Server Improper Input Validation Vulnerability (CVE-2017-5659)

Ruby Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2021-28966)

MySQL CVE-2012-0116 Vulnerability (CVE-2012-0116)

Ruby on Rails Improper Input Validation Vulnerability (CVE-2016-2098)

Severity

High

Classification

CVE-2023-40626 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Tags

Missing Update Known Vulnerabilities