CVE-2024-35232

—

CVSS 3.1

3.7 low

EPSS

<1%p41

Published

May 24, 2024 (May 24, 2024)

Modified

Jun 17, 2026

Description

github.com/huandu/facebook is a Go package that fully supports the Facebook Graph API with file upload, batch request and marketing API. access_token can be exposed in error message on fail in HTTP request. This issue has been patched in version 2.7.2.

Weakness: CWE-209
Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N

NVD CVE.org GitHub PoCs EPSS (0.5%)

In the news0 stories

No ingested article mentions this CVE yet.