{"resultsPerPage":1,"startIndex":0,"totalResults":1,"format":"NVD_CVE","version":"2.0","timestamp":"2026-04-23T11:45:50.545","vulnerabilities":[{"cve":{"id":"CVE-2024-48310","sourceIdentifier":"cve@mitre.org","published":"2025-01-28T23:15:07.677","lastModified":"2026-04-15T00:35:42.020","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"AutoLib Software Systems OPAC v20.10 was discovered to have multiple API keys exposed within the source code. Attackers may use these keys to access the backend API or other sensitive information."},{"lang":"es","value":"Se descubrió que el AutoLib Software Systems OPAC v20.10 tiene varias claves API expuestas dentro del código fuente. Los atacantes pueden usar estas claves para acceder a la API de backend o a otra información confidencial."}],"metrics":{"cvssMetricV31":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","baseScore":7.5,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":3.9,"impactScore":3.6}]},"weaknesses":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","description":[{"lang":"en","value":"CWE-200"}]}],"references":[{"url":"https://seclists.org/fulldisclosure/2025/Jan/11","source":"cve@mitre.org"},{"url":"http://seclists.org/fulldisclosure/2025/Jan/11","source":"af854a3a-2127-422b-91ae-364da2661108"}]}}]}