CVE-2026-7071 - Vulnerability Analysis

Overview

CodeAstro Online Job Portal 1.0 contains an information disclosure vulnerability caused by manipulation in /users/user-cvs/, letting remote attackers access file and directory information, exploit requires no special conditions.

Severity & Score

Impact

Remote attackers can access sensitive file and directory information, potentially exposing confidential data.

Mitigation

Update to the latest version.

References

• https://github.com/Xmyronn/CodeAstro-Job-Portal-Unauthenticated-Resume-Exposure
• https://vuldb.com/submit/799236
• https://vuldb.com/vuln/359646
• https://vuldb.com/vuln/359646/cti
• https://codeastro.com/

Related Resources

• Vulnerability Intelligence Dashboard
• Credential Scanner