PatchTheCVECVE-2024-31298: Insertion of Sensitive Information into Log File vulnerability in Joel Hardi User Spam Remover.This issue affe
CVE-2024-31298 is a medium-severity flaw (CVSS 5.3) affecting user spam remover. Below: why it ranks where it does, which versions are affected, what to do, and the exact commands.
Insertion of Sensitive Information into Log File vulnerability in Joel Hardi User Spam Remover.This issue affects User Spam Remover: from n/a through 1.0.
Why this priority
- Remotely exploitable, no login, no user action
A fixed release or distro patch exists.
Risk facts
| CVSS score | 5.3 (Medium) |
| Attack vector | Network (remote) |
| Attack complexity | Low |
| Privileges needed | None |
| User interaction | None |
| EPSS exploit chance | 0.5% (top 57%) |
| CISA exploited list | No |
| Weakness | CWE-532 |
| Published | 2024-04-10 |
| Last modified | 2026-06-17 |
Last updated 2026-06-17 · Sources: CVE Program, NVD, CISA KEV, EPSS and vendor advisories · How we score
Am I affected?
Timeline
- Published CVE record published
- Updated Record last modified
Scores and fixes here are computed automatically from those and other public sources. Confirm with the vendor advisory before changing production systems.
Quick answers
How do I fix CVE-2024-31298?
user spam remover: upgrade to 1.1. Exact commands for each OS are on this page.
Is CVE-2024-31298 being exploited?
CVE-2024-31298 is not on the CISA Known Exploited Vulnerabilities list at the time of the last update. Check again, as this can change.
What does CVE-2024-31298 affect?
CVE-2024-31298 affects user spam remover. Severity is medium (CVSS 5.3). Insertion of Sensitive Information into Log File vulnerability in Joel Hardi User Spam Remover.This issue affects User Spam Remover: from n/a through 1.0.
How urgent is CVE-2024-31298?
Priority 34/100. Remotely exploitable, no login, no user action