GPP Burgerportaal Employee Information Disclosure Vulnerability

A vulnerability in GPP Burgerportaal, a Dutch government citizen portal application, allows for the unintentional exposure of employees' names and email addresses in network responses. This issue is present in versions prior to 2.0.3, 3.0.2, and 4.0.1. The exposed information can be accessed through the browser's developer tools, potentially violating privacy expectations and leading to targeted attacks or unwanted contact. The vulnerability has been patched in versions 2.0.3, 3.0.2, and 4.0.1.

Impact

The vulnerability could lead to unauthorized disclosure of employee names and email addresses, creating potential privacy violations and risks of targeted attacks or unwanted contact.

Remediation

Users are advised to upgrade to version 2.0.3, 3.0.2, or 4.0.1.