CVE-2024-28627
21Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackcvss 7.5epss 0.4%
exploitation probability
0.4%top 63% of all CVEs
observed exploitation
nono source reports it
In short
Flipsnack's reader.gz.js file exposes sensitive information that a local attacker can access. This matters because an attacker with access to the same system could steal private data stored in this file.
Technical detail
A local information disclosure vulnerability exists in Flipsnack v.18/03/2024 affecting the reader.gz.js file (CWE-603: Use of Hard-Coded Password, CWE-863: Incorrect Authorization). A local attacker with file-system access can retrieve sensitive information, potentially including credentials or configuration data, due to inadequate access controls or hardcoded secrets.
Summary generated and translated by AI from the official description.
An issue in Flipsnack v.18/03/2024 allows a local attacker to obtain sensitive information via the reader.gz.js file.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Affected products
n/a · n/a