CVE-2026-19229
MediumCVSS 5.3Exploitation Probability (EPSS)
Low risk26th percentile - higher than 26% of all known CVEs
Summary
In SourceCodester Online Clothing Store, there is a vulnerability in the /_notes/ file (Dreamweaver Metadata Files component) that allows remote disclosure of file and directory information.
Risk Assessment
The attack can reveal directory structure and file names, which may aid an attacker in further attacks.
Recommendation
Secure access to the /_notes/ directory (e.g., via server configuration deny) and remove unnecessary metadata files.
Original NVD description (English source)
A vulnerability was determined in SourceCodester Online Clothing Store. Affected by this issue is some unknown functionality of the file /_notes/ of the component Dreamweaver Metadata Files. Executing a manipulation can lead to file and directory information exposure. The attack can be launched remotely. The exploit has been publicly disclosed and may be utilized.