CVEvulnerability
CVE-2013-7301
5.0 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2014-02-02
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 5.0 MEDIUM — AV:N/AC:L/Au:N/C:P/I:N/A:N
- Weaknesses
- CWE-264
Description
Cantata before 1.2.2 does not restrict access to files in the play queue, which allows remote attackers to obtain sensitive information by reading the songs in the queue.
Affected configurations
• craig drummond cantata (<= 1.2.1)
• craig drummond cantata 0.7.0
• craig drummond cantata 0.7.1
• craig drummond cantata 0.8.0
• craig drummond cantata 0.8.1
• craig drummond cantata 0.8.2
• craig drummond cantata 0.8.3
• craig drummond cantata 0.8.3.1
• craig drummond cantata 0.9.0
• craig drummond cantata 0.9.1
• craig drummond cantata 0.9.2
• craig drummond cantata 1.0.0
• craig drummond cantata 1.0.1
• craig drummond cantata 1.0.2
• craig drummond cantata 1.0.3
• craig drummond cantata 1.1.0
• craig drummond cantata 1.1.1
• craig drummond cantata 1.1.2
• craig drummond cantata 1.1.3
• craig drummond cantata 1.2.0
Related
Weakness · not in database (1)
References
- http://seclists.org/oss-sec/2014/q1/121 seclists.org
- http://seclists.org/oss-sec/2014/q1/124 seclists.org
- https://code.google.com/p/cantata/issues/detail?id=356 Exploit
- http://seclists.org/oss-sec/2014/q1/121 seclists.org
- http://seclists.org/oss-sec/2014/q1/124 seclists.org
- https://code.google.com/p/cantata/issues/detail?id=356 Exploit