Skip to content
CVE PROGRAM SOURCE RECORD6.9 Medium

CVE-2024-12564

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in ODA CDE inWEB SDK before 2025.3

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
ODA

Description

Exposure of Sensitive Information to an Unauthorized Actor vulnerability was discovered in Open Design Alliance CDE inWEB SDK before 2025.3. Installing CDE Server with default settings allows unauthorized users to visit prometheus metrics page. This can allow attackers to understand more things about the target application which may help in further investigation and exploitation.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Open Design Alliance CDE inWEB SDK

Default version status: unaffected

  • 0 to < 2025.3affected

References