CVE-2026-6492

See a problem?
Please try reporting it to the source first.

Source

https://cve.org/CVERecord?id=CVE-2026-6492

Import Source

https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-6492.json

JSON Data

https://api.osv.dev/v1/vulns/CVE-2026-6492

Published

2026-04-17T14:00:15.221Z

Modified

2026-08-04T05:34:32.491391734Z

Severity

5.5 (Medium) CVSS_V4 - CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:P CVSS Calculator

Summary

arnobt78 Hotel Booking Management System Health Check Endpoint detailed information disclosure

Details

A vulnerability was detected in arnobt78 Hotel Booking Management System up to f8922d0e0f6ac1cc761974c7616f44c2bbc04bea. The impacted element is an unknown function of the file /api/health/detailed of the component Health Check Endpoint. Performing a manipulation results in information disclosure. Remote exploitation of the attack is possible. The exploit is now public and may be used. This product follows a rolling release approach for continuous delivery, so version details for affected or updated releases are not provided. The patch is named d47ae0e27c700b64dc417f7f01b84a6b1b0b6bd3. To fix this issue, it is recommended to deploy a patch.

Database specific

{
    "cwe_ids": [
        "CWE-200",
        "CWE-284"
    ],
    "cna_assigner": "VulDB",
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/6xxx/CVE-2026-6492.json",
    "unresolved_ranges": [
        {
            "source": "AFFECTED_FIELD",
            "extracted_events": [
                {
                    "introduced": "f8922d0e0f6ac1cc761974c7616f44c2bbc04bea"
                },
                {
                    "last_affected": "f8922d0e0f6ac1cc761974c7616f44c2bbc04bea"
                }
            ]
        }
    ]
}

References

Affected packages

Git / github.com/arnobt78/hotel-booking-management-system--react-mern-fullstack

Affected ranges

Type

GIT

Repo

https://github.com/arnobt78/hotel-booking-management-system--react-mern-fullstack

Events

Introduced

Fixed

d47ae0e27c700b64dc417f7f01b84a6b1b0b6bd3

Database specific

{
    "source": "REFERENCES"
}

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-6492.json"