Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-mg2c-c9jj-4xgv

Опубликовано: 03 апр. 2022
Источник: github
Github: Не прошло ревью
CVSS3: 4.9

Описание

Unauthenticated users can access sensitive web URLs through GET request, which should be restricted to maintenance users only. A malicious attacker could use this sensitive information’s to launch further attacks on the system.

Unauthenticated users can access sensitive web URLs through GET request, which should be restricted to maintenance users only. A malicious attacker could use this sensitive information’s to launch further attacks on the system.

EPSS

Процентиль: 75%
0.00882
Низкий

4.9 Medium

CVSS3

Дефекты

CWE-400

Связанные уязвимости

CVSS3: 4.9
nvd
почти 4 года назад

Unauthenticated users can access sensitive web URLs through GET request, which should be restricted to maintenance users only. A malicious attacker could use this sensitive information’s to launch further attacks on the system.

EPSS

Процентиль: 75%
0.00882
Низкий

4.9 Medium

CVSS3

Дефекты

CWE-400