Intel

AIKIDO-2024-10184

@forestadmin/datasource-toolkit is vulnerable to Generation of Error Message Containing Sensitive Information

Generation of Error Message Containing Sensitive Information Pre-CVE
Found by Aikido Intel before public disclosure or CVE publication.
Published Jul 16, 2024

30

Low Risk

This Affects:

JS@forestadmin/datasource-toolkit
1.34.2 - 1.34.2
Fixed in 1.34.3
Are you affected? Scan for Free

TL;DR

Affected versions of the package may generate error messages that contain sensitive information.

Who does this affect?

You are affected if you are using a version that falls within the vulnerable range.

Background info

@forestadmin/datasource-toolkit is vulnerable to Generation of Error Message Containing Sensitive Information in versions 1.34.2 - 1.34.2.

How to fix this

Upgrade the @forestadmin/datasource-toolkit library to the patch version.