CVE-2024-23760

Severity: low (CVSS 2.7 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.4% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2024-02-12 · updated 2026-06-17
Weakness: CWE-532

Description

Cleartext Storage of Sensitive Information in Gambio 4.9.2.0 allows attackers to obtain sensitive information via error-handler.log.json and legacy-error-handler.log.txt under the webroot.

Affected products

Gambio: 4.9.2.0

References

https://herolab.usd.de/security-advisories/usd-2023-0050/
https://herolab.usd.de/security-advisories/usd-2023-0050/

Get alerted when CVE-2024-23760 or the next vulnerability affects your stack