Information Exposure Affecting wordops package, versions [,3.15.2)
Do your applications use this vulnerable package?
In a few clicks we can analyze your entire application and see what components are vulnerable in your application, and suggest you quick fixes.
Test your applications- Snyk ID SNYK-PYTHON-WORDOPS-3038524
- published 2 Oct 2022
- disclosed 2 Oct 2022
- credit Unknown
How to fix?
Upgrade wordops to version 3.15.2 or higher.
Overview
wordops is an An essential toolset that eases server administration
Affected versions of this package are vulnerable to Information Exposure as it is dumping sensitive information in logs, such as MariaDB password.
References
CVSS Scores
version 3.1