Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-vgfp-g7fm-rm4h

Опубликовано: 29 апр. 2022
Источник: github
Github: Не прошло ревью

Описание

HTTP Commander 4.0 allows remote attackers to obtain sensitive information via an HTTP request that contains a . (dot) in the file parameter, which reveals the installation path in an error message.

HTTP Commander 4.0 allows remote attackers to obtain sensitive information via an HTTP request that contains a . (dot) in the file parameter, which reveals the installation path in an error message.

EPSS

Процентиль: 61%
0.00409
Низкий

Связанные уязвимости

nvd
около 22 лет назад

HTTP Commander 4.0 allows remote attackers to obtain sensitive information via an HTTP request that contains a . (dot) in the file parameter, which reveals the installation path in an error message.

EPSS

Процентиль: 61%
0.00409
Низкий