CVE-2026-50870

Published: Jun 15, 2026Modified: Jun 17, 2026Deferred

7.5

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Exploitability: 3.9 / Impact: 3.6

Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0 (Secondary)

Description

An information disclosure vulnerability in the configuration endpoint of Ben Busby whoogle-search v1.2.3 allows attackers to obtain sensitive information via a crafted GET request.

Related CWEs

CWE-200

Exposure of Sensitive Information to an Unauthorized Actor

The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

References (2)

https://gist.github.com/pyuysig/b15055668de5fa09d08448ce830bba10

Source: cve@mitre.org

https://gist.github.com/pyuysig/b15055668de5fa09d08448ce830bba10

Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0

Timeline

No history available yet.