Homepage
About Snyk

Information Exposure Affecting wordops package, versions [,3.15.2)

0.0
medium

Snyk CVSS

    Attack Complexity Low

Do your applications use this vulnerable package?

In a few clicks we can analyze your entire application and see what components are vulnerable in your application, and suggest you quick fixes.

Test your applications
  • Snyk ID SNYK-PYTHON-WORDOPS-3038524
  • published 2 Oct 2022
  • disclosed 2 Oct 2022
  • credit Unknown
Report a new vulnerability Found a mistake?

Introduced: 2 Oct 2022

CVE NOT AVAILABLE CWE-200 Open this link in a new tab

How to fix?

Upgrade wordops to version 3.15.2 or higher.

Overview

wordops is an An essential toolset that eases server administration

Affected versions of this package are vulnerable to Information Exposure as it is dumping sensitive information in logs, such as MariaDB password.