Back to overview

CVE-2024-35690

MEDIUM
6.5
CVSS 3.1
Description
Insertion of sensitive information into sent data vulnerability in MarketingFire Widget Options allows Retrieve Embedded Sensitive Data. This issue affects Widget Options: from n/a through 4.0.1.

Metadata

CVE ID
CVE-2024-35690
State
PUBLISHED
Assigner
Patchstack
Reserved
2024-05-17 10:08 UTC
Published
2026-06-17 12:05 UTC
Last updated
2026-06-17 12:45 UTC
Primary CWE
CWE-201
CWE-201 Insertion of sensitive information into sent data
Vendor / Product
MarketingFire / Widget Options
Sources
cve.org  ·  NVD

Severity & Metrics

6.5 MEDIUM CVSS 3.1
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
SSVC — CISA Coordinator
Exploitation
none
Automatable
no
Tech. Impact
partial
Affected products (1)
VendorProductPlatformVersions
MarketingFire Widget Options — n/a ≤ 4.0.1
Weakness (CWE)
CWESourceDescription
CWE-201 cna CWE-201 Insertion of sensitive information into sent data
CVSS scores (1)
ScoreSeverityVersionSourceVector
6.5 MEDIUM 3.1 cna CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
References (1)
Back to overview