CVE-2023-33181
MediumCVSS 4.3Exploitation Probability (EPSS)
Low risk41th percentile - higher than 41% of all known CVEs
Summary
Xibo is a content management system (CMS) that in versions from 3.0.0 to 3.3.5 reveals sensitive information by printing stack traces when certain API routes are called with missing or invalid parameters. Users should upgrade to version 3.3.5, which fixes this issue.
Risk Assessment
The disclosure of sensitive information about server paths may lead to an increased risk of attacks on the system. Organizations should promptly update the software to minimize this risk.
Recommendation
It is recommended to immediately upgrade to version 3.3.5 to eliminate this vulnerability. There are no known workarounds aside from upgrading.
Original NVD description (English source)
Xibo is a content management system (CMS). Starting in version 3.0.0 and prior to version 3.3.5, some API routes will print a stack trace when called with missing or invalid parameters revealing sensitive information about the locations of paths that the server is using. Users should upgrade to version 3.3.5, which fixes this issue. There are no known workarounds aside from upgrading.