VULNERABILITY INTELLIGENCE

CVE-2024-35232

CVSS score3.7 LOW
EPSS probability0.50%
CISA KEVNot currently listed
Published2024-05-24
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N

Description

github.com/huandu/facebook is a Go package that fully supports the Facebook Graph API with file upload, batch request and marketing API. access_token can be exposed in error message on fail in HTTP request. This issue has been patched in version 2.7.2.

Weakness classification

  • CWE-209: Generation of Error Message Containing Sensitive Information

Primary references