Description

The response contains one or more credit card numbers. The credit card numbers were validated using the Luhn algorithm to make sure they are real credit card numbers.

Remediation

It's recommended that sensitive data such as credit card numbers or social security numbers should not be exposed on your website.

References

Sensitive Data Exposure

Related Vulnerabilities

WebLogic Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2021-40690)

WordPress 3.1.2 Multiple Vulnerabilities (3.0.1 - 3.1.2)

WordPress Plugin SSL Insecure Content Fixer Information Disclosure (2.0.0)

WordPress Plugin Ninja Forms Contact Form-The Drag and Drop Form Builder for WordPress Multiple Vulnerabilities (3.4.33)

WordPress 4.8.x Multiple Vulnerabilities (4.8 - 4.8.20)

Severity

Medium

Classification

CWE-200 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N

Tags

Information Disclosure