GHSA-m4mm-534h-5cp5

Source

https://github.com/advisories/GHSA-m4mm-534h-5cp5

Import Source

https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2025/02/GHSA-m4mm-534h-5cp5/GHSA-m4mm-534h-5cp5.json

JSON Data

https://api.osv.dev/v1/vulns/GHSA-m4mm-534h-5cp5

Aliases

CVE-2024-57716

Published

2025-02-20T18:31:24Z

Modified

2025-02-20T23:27:16.750157Z

Severity

6.9 (Medium) CVSS_V4 - CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N CVSS Calculator

Summary

AutoQueryable leaks sensitive information

Details

An issue in trenoncourt AutoQueryable v.1.7.0 allows a remote attacker to obtain sensitive information via the Unselectable function.

Database specific

{
    "github_reviewed_at": "2025-02-20T22:58:43Z",
    "severity": "MODERATE",
    "cwe_ids": [
        "CWE-200"
    ],
    "github_reviewed": true,
    "nvd_published_at": "2025-02-20T17:15:11Z"
}

References

Affected packages

NuGet / AutoQueryable

Package

Name: AutoQueryable; View open source insights on deps.dev
Purl: pkg:nuget/AutoQueryable

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Last affected

2.0.11-beta

Affected versions

0.*

0.0.1

0.1.0

0.2.0

0.2.1

0.2.3

0.2.4

0.3.1

0.4.0

0.5.0

0.6.0

0.6.1

0.7.0

0.8.0

0.8.1

0.8.2

0.9.0

0.9.1

0.10.0

0.11.0

0.11.1

0.11.2

0.11.3

0.11.4

0.11.5

0.11.6

0.12.0

0.13.0

1.*

1.0.0

1.2.0

1.3.0

1.4.0

1.4.1

1.5.0

1.5.1

1.6.0

1.7.0

2.*

2.0.1-beta

2.0.2-beta

2.0.3-beta

2.0.4-beta

2.0.5-beta

2.0.6-beta

2.0.7-beta

2.0.8-beta

2.0.9-beta

2.0.10-beta

2.0.11-beta

Database specific

source

"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2025/02/GHSA-m4mm-534h-5cp5/GHSA-m4mm-534h-5cp5.json"