A security vulnerability has been detected in Kameleo up to 5.3.1. This vulnerability affects the /general/user-info file of the Local API component. The vulnerability allows for information disclosure and can be exploited remotely. Defenders should assess exposure and verify the vulnerability in their Kameleo instances. The attack may be performed from remote, and the vendor was contacted but did not res [truncated]
A weakness was identified in Kameleo up to 5.0.1.26, specifically in the Local API profiles component. This issue leads to information disclosure and can be exploited remotely. Upgrading to version 5.2.0 mitigates this vulnerability. The vulnerability affects the Local API profiles component, allowing for remote exploitation and information disclosure. Defenders should assess exposure and prioritize upgra [truncated]
A security flaw has been discovered in Kameleo up to 5.3.1, affecting the CookieController.ListCookies function in client-engine-application/w.cs. This vulnerability allows remote information disclosure via manipulation of the guid argument. Defenders should assess exposure, prioritize verification and mitigation, and limit access to prevent remote information disclosure. The attack can be executed remote [truncated]