CVE-2024-8417
Published: 04 September 2024
Summary
CVE-2024-8417 is a low-severity Inclusion of Sensitive Information in Source Code (CWE-540) vulnerability in Yunknet Online School System. Its CVSS base score is 2.3 (Low).
Operationally, ranked at the 32.0th percentile by exploit likelihood (below the median); it is not currently listed in the CISA KEV catalog; a public proof-of-concept is referenced.
EU & UK References
- 🇪🇺 ENISA EUVD: EUVD-2024-49163
Vulnerability details
A vulnerability was found in 云课网络科技有限公司 Yunke Online School System up to 1.5.5. It has been declared as problematic. This vulnerability affects unknown code of the file /admin/educloud/videobind.html. The manipulation leads to inclusion of sensitive information in source code. The…
more
attack can be initiated remotely. The complexity of an attack is rather high. The exploitation appears to be difficult. The exploit has been disclosed to the public and may be used. Upgrading to version 1.5.6 is able to address this issue. It is recommended to upgrade the affected component.
- CWE(s)
Related Threats
No named actor attribution yet. ATT&CK technique mapping in progress for this CVE.
Affected Assets
Mitigating Controls
Likely Mitigating Controls AI
Per-CVE control mapping for this CVE has not run yet; the list below is derived from the weakness types (CWEs) cited in the NVD entry.
Detection and removal of spilled information addresses cases where sensitive data was included in source code.
Screening helps prevent intentional insertion of sensitive information into source code by untrusted developers.
Prevents inclusion of sensitive information in source code and development artifacts through SDLC-wide OPSEC controls.