PT-2008-2585

CVE-2008-0982

Publicado

2008-02-25

Atualizado

2018-10-15

Descrição por

CVSS 2.0

5.8

Média

MétricasAV:N/AC:M/Au:N/C:P/I:P/A:N

Name of the Vulnerable Software and Affected Versions Spyce - Python Server Pages (PSP) version 2.1.3

Description The issue allows remote attackers to obtain sensitive information via a direct request for "spyce/examples/automaton.spy", which reveals the path in an error message.

Recommendations For version 2.1.3, consider restricting access to the "spyce/examples/automaton.spy" endpoint to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Explorabilidade

Exploit

Impactos

Pesquisadores

Bruno Kovacs

Jan Fry

Richard Brain

Fornecedores

Produtos afetados

Enumeração de fraquezas

CWE-20: Improper Input Validation

Identificadores relacionados