Описание
This vulnerability exists in the Wave 2.0 due to improper exception handling for invalid inputs at certain API endpoint. An authenticated remote attacker could exploit this vulnerability by providing invalid inputs for “userId” parameter in the API request leading to generation of error message containing sensitive information on the targeted system.
Ссылки
- Third Party Advisory
Уязвимые конфигурации
Конфигурация 1Версия до 120820241550 (исключая)Версия до 1.1.7 (исключая)
Одно из
cpe:2.3:a:63moons:aero:*:*:*:*:*:*:*:*
cpe:2.3:a:63moons:wave_2.0:*:*:*:*:*:*:*:*
EPSS
Процентиль: 41%
0.00188
Низкий
4.3 Medium
CVSS3
Дефекты
CWE-209
Связанные уязвимости
CVSS3: 4.3
github
больше 1 года назад
This vulnerability exists in the Wave 2.0 due to improper exception handling for invalid inputs at certain API endpoint. An authenticated remote attacker could exploit this vulnerability by providing invalid inputs for “userId” parameter in the API request leading to generation of error message containing sensitive information on the targeted system.
EPSS
Процентиль: 41%
0.00188
Низкий
4.3 Medium
CVSS3
Дефекты
CWE-209