Home
Home
Trends
Trends
Vulnerabilities
Vulnerabilities
News
News
Researchers
Researchers
Why dbugs?
Why dbugs?
Settings

Gibkigonzo

#50972of 56,330
5.3Total CVSS
Vulnerabilities · 1
PT-2020-12917
5.3
2020-04-17
Divante · Vue-Storefront-Api · CVE-2020-11883
**Name of the Vulnerable Software and Affected Versions** Divante vue-storefront-api versions 1.11.1 and earlier Divante storefront-api versions 1.0-rc.1 and earlier **Description** The issue arises from unexpected HTTP requests that lead to an exception, resulting in the disclosure of the error stack trace. This error stack trace includes absolute file paths and Node.js module names. **Recommendations** For Divante vue-storefront-api versions 1.11.1 and earlier, consider implementing error handling to prevent the disclosure of sensitive information in the error stack trace. For Divante storefront-api versions 1.0-rc.1 and earlier, restrict access to error messages that may contain absolute file paths and Node.js module names to minimize the risk of exploitation.