CVE-2019-18850

Name of the Vulnerable Software and Affected Versions TrevorC2 versions 1.1 through 1.2

Description The issue arises from a discrepancy in response headers when responding to different HTTP methods. Additionally, predictable responses occur when accessing and interacting with the SITE PATH QUERY. This allows for potential fingerprinting.

Recommendations For TrevorC2 versions 1.1 through 1.2, as a temporary workaround, consider restricting access to the SITE PATH QUERY to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.