CVE-2023-5579: yhz66 Sandbox User Data information disclosure

Severity: medium (CVSS 6.5 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.3% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2023-10-14 · updated 2026-06-17
Weakness: CWE-200

Description

A vulnerability was found in yhz66 Sandbox 6.1.0. It has been rated as problematic. Affected by this issue is some unknown functionality of the file /im/user/ of the component User Data Handler. The manipulation leads to information disclosure. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-242144.

Affected products

yhz66 Sandbox: 6.1.0

References

https://github.com/cojoben/Sendbox/blob/main/README.md
https://vuldb.com/?ctiid.242144
https://vuldb.com/?id.242144
https://github.com/cojoben/Sendbox/blob/main/README.md
https://vuldb.com/?ctiid.242144
https://vuldb.com/?id.242144

Get alerted when CVE-2023-5579 or the next vulnerability affects your stack