cve/2023/CVE-2023-40600.md

19 lines
818 B
Markdown
Raw Normal View History

2024-05-25 21:48:12 +02:00
### [CVE-2023-40600](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-40600)
![](https://img.shields.io/static/v1?label=Product&message=EWWW%20Image%20Optimizer&color=blue)
![](https://img.shields.io/static/v1?label=Version&message=n%2Fa&color=blue)
![](https://img.shields.io/static/v1?label=Vulnerability&message=CWE-200%20Exposure%20of%20Sensitive%20Information%20to%20an%20Unauthorized%20Actor&color=brighgreen)
### Description
Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Exactly WWW EWWW Image Optimizer. It works only when debug.log is turned on.This issue affects EWWW Image Optimizer: from n/a through 7.2.0.
### POC
#### Reference
No PoCs from references.
#### Github
- https://github.com/RandomRobbieBF/CVE-2023-40600
- https://github.com/nomi-sec/PoC-in-GitHub