EUVD-2026-63996
GHSA-9339-3h6v-jp8c
Severity by source
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Network-accessible SaaS with no authentication required; impact limited to low confidentiality loss from database path disclosure, with no integrity or availability consequence.
Primary rating from Vendor (9119a7d8-5eab-497f-8521-727c672e3725).
CVSS VectorVendor: 9119a7d8-5eab-497f-8521-727c672e3725
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Lifecycle Timeline
2DescriptionCVE.org
The Brushfire platform's video content streaming application (https://online.brushfire.com) exposes database path in requests to users, allowing a remote, unauthenticated attacker to read information about other users. Fixed February 2026.
AnalysisAI
Information disclosure in the Brushfire video content streaming platform (online.brushfire.com) exposes internal database path strings within HTTP responses to unauthenticated remote users, allowing enumeration of other users' data. The root cause is CWE-497 (Exposure of Sensitive System Information to an Unauthorized Control Sphere), where backend infrastructure details are insufficiently abstracted from client-facing responses. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | No special conditions are required for exploitation - the CVSS 4.0 vector (AV:N/AC:L/AT:N/PR:N/UI:N) confirms remote unauthenticated exploitation against the default configuration of the Brushfire streaming application at https://online.brushfire.com, with no attack prerequisites. … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | The CVSS 4.0 score of 6.9 reflects network-accessible, unauthenticated, zero-complexity exploitation but only low confidentiality impact (VC:L) with no integrity or availability impact, which is a reasonable calibration for a path disclosure flaw. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | An unauthenticated attacker sends standard HTTP requests to the Brushfire streaming platform and observes that server responses contain internal database path strings referencing backend data structures and other user records. The attacker systematically harvests these paths to map the database schema and enumerate other users' information without any credentials. … |
| Remediation | Because Brushfire is a SaaS platform, the vendor applied the fix server-side in February 2026 with no customer-side patching action required - all tenants received the remediation automatically. … Detailed patch versions, workarounds, and compensating controls in full report. |
Threat intelligence, references, and detailed analysis are available after sign-in.
Same technique Information Disclosure
View allShare
External POC / Exploit Code
Leaving vuln.today