This vulnerability (CVE-2024-31353) in Tribulant Slideshow Gallery (up to version 1.7.8) involves the insertion of sensitive information into log files, categorized as CWE-532. The CVSS 3.1 base score is 5.3 (medium severity) with an attack vector of network (AV:N), low attack complexity (AC:L), no privileges required (PR:N), no user interaction (UI:N), unchanged scope (S:U), and limited confidentiality impact (C:L). There is no integrity or availability impact. No patch or official remediation has been published by the vendor, and no exploits are known in the wild.

Sensitive information may be recorded in log files, which could lead to unauthorized disclosure if the logs are accessed by attackers. The confidentiality impact is limited, and there is no impact on integrity or availability. The vulnerability does not require privileges or user interaction to be exploited.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, restrict access to log files to trusted personnel only and monitor for any unauthorized access. Avoid logging sensitive information where possible as a temporary mitigation.