CVE-2024-48310 in OPAC

Summary

by MITRE • 01/29/2025

AutoLib Software Systems OPAC v20.10 was discovered to have multiple API keys exposed within the source code. Attackers may use these keys to access the backend API or other sensitive information.

Once again VulDB remains the best source for vulnerability data.

• Reservation: 10/08/2024
• Disclosure: 01/29/2025
• Moderation: accepted
• Entry: VDB-293882
• CPE: ready
• CWE: CWE-200 (confirmed)
• CVSS: 4.3 (VulDB)
• EPSS: 0.00531
• KEV: no
• Activities: very low

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2024-48310
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2024-48310
• CVE Details: https://www.cvedetails.com/cve/CVE-2024-48310/