Vulnerability in Craig Drummond Cantata
CVE-2013-7301
Cantata before 1.2.2 does not restrict access to files in the play queue, which allows remote attackers to obtain sensitive information by reading the songs in the queue.
EPSS: 0.015 (71.8th percentile) — read the EPSS interpretation.
Affected products
- Craig_drummond Cantata — versions 0.7.0, 0.7.1, 0.8.0
- N/a — versions n/a
Weakness classification (CWE)
References
- cve@mitre.org (x_refsource_CONFIRM, Exploit)
- cve@mitre.org (mailing-list, x_refsource_MLIST)
- cve@mitre.org (mailing-list, x_refsource_MLIST)