Information Exposure Affecting collaborative-article-sharing package, versions [,0.1.0b2)

Do your applications use this vulnerable package?

In a few clicks we can analyze your entire application and see what components are vulnerable in your application, and suggest you quick fixes.

Test your applications

Snyk IDSNYK-PYTHON-COLLABORATIVEARTICLESHARING-8600553
published1 Jan 2025
disclosed1 Jan 2025
creditUnknown

Report a new vulnerability Found a mistake?

Introduced: 1 Jan 2025

NewCWE-200 (opens in a new tab)

How to fix?

Upgrade collaborative-article-sharing to version 0.1.0b2 or higher.

Overview

collaborative-article-sharing is a Command-line interface for interacting with the CAS API

Affected versions of this package are vulnerable to Information Exposure because the Flask application runs in debug mode in a production environment.

References

CVSS Scores

version 4.0

version 3.1

Attack Vector (AV)
Network
Attack Complexity (AC)
Low
Attack Requirements (AT)
None
Privileges Required (PR)
None
User Interaction (UI)
None

Confidentiality (VC)
Low
Integrity (VI)
None
Availability (VA)
None

Confidentiality (SC)
None
Integrity (SI)
None
Availability (SA)
None