Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-293p-8p8x-wx39

Опубликовано: 17 мая 2022
Источник: github
Github: Не прошло ревью

Описание

SmarterTools SmarterStats 6.2.4100 generates web pages containing external links in response to GET requests with query strings for frmGettingStarted.aspx, which makes it easier for remote attackers to obtain sensitive information by reading (1) web-server access logs or (2) web-server Referer logs, related to a "cross-domain Referer leakage" issue.

SmarterTools SmarterStats 6.2.4100 generates web pages containing external links in response to GET requests with query strings for frmGettingStarted.aspx, which makes it easier for remote attackers to obtain sensitive information by reading (1) web-server access logs or (2) web-server Referer logs, related to a "cross-domain Referer leakage" issue.

EPSS

Процентиль: 46%
0.0023
Низкий

Дефекты

CWE-200

Связанные уязвимости

nvd
почти 14 лет назад

SmarterTools SmarterStats 6.2.4100 generates web pages containing external links in response to GET requests with query strings for frmGettingStarted.aspx, which makes it easier for remote attackers to obtain sensitive information by reading (1) web-server access logs or (2) web-server Referer logs, related to a "cross-domain Referer leakage" issue.

EPSS

Процентиль: 46%
0.0023
Низкий

Дефекты

CWE-200