CVE-2023-27587

MEDIO 6.5CVE-2023-27587 · Published 13/03/2023 · updated 17/06/2026

In breve

CVE-2023-27587 è una vulnerabilità MEDIO (CVSS 6.5) che riguarda readtomyshoe (readtomyshoe project).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 3.9%, superiore al 90.3% delle vulnerabilità.
Correzione: aggiornare a 2023-03-13 o successiva.

Package	Affected versions	Patched versions
readtomyshoe readtomyshoe_project	`< 2023-03-13`	`2023-03-13`

Description

ReadtoMyShoe, a web app that lets users upload articles and listen to them later, generates an error message containing sensitive information prior to commit 8533b01. If an error occurs when adding an article, the website shows the user an error message. If the error originates from the Google Cloud TTS request, then it will include the full URL of the request. The request URL contains the Google Cloud API key. This has been patched in commit 8533b01. Upgrading should be accompanied by deleting the current GCP API key and issuing a new one. There are no known workarounds.

References

rozbb/readtomyshoe commit 8533b01 · Patch
rozbb/readtomyshoe security advisory · Patch

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free