CVE-2013-7301

Cantata before 1.2.2 does not restrict access to files in the play queue, which allows remote attackers to obtain sensitive information by reading the songs in the queue.

Score

CVSS 2.0 5.0 Medium

Status

Modified - cve@mitre.org

Published

2014-02-02

Last modified

2024-08-06

Weaknesses

CWE-264

Affected products

• Cantata (Craig Drummond)

References

• http://seclists.org/oss-sec/2014/q1/121
• http://seclists.org/oss-sec/2014/q1/124
• https://code.google.com/p/cantata/issues/detail?id=356