Skip to content
OpenAdvisories
Medium · 5.3 CVE-2023-27510 EUVD-2023-31272GHSA-g3x7-rm82-3mw8

JB Inquiry form contains an exposure of private personal information to an unauthorized actor vulnerability, which may allow a remote unaut…

Published May 10, 2023 · Updated Jan 28, 2025 · Assigned by jpcert

Description

JB Inquiry form contains an exposure of private personal information to an unauthorized actor vulnerability, which may allow a remote unauthenticated attacker to obtain information entered from forms created using the affected product. The affected products and versions are as follows: JB Inquiry form versions 0.6.1 and 0.6.0, JB Inquiry form versions 0.5.2, 0.5.1 and 0.5.0, and JB Inquiry form version 0.40.

Affected products

VendorProductAffectedFixed
Jubei JB Inquiry form versions 0.6.1 and 0.6.0, versions 0.5.2, 0.5.1, and 0.5.0, and version 0.40 —

References