PT-2008-2585

CVE-2008-0982

Published

2008-02-25

Updated

2018-10-15

Description by

CVSS 2.0

5.8

Medium

MetricsAV:N/AC:M/Au:N/C:P/I:P/A:N

Name of the Vulnerable Software and Affected Versions Spyce - Python Server Pages (PSP) version 2.1.3

Description The issue allows remote attackers to obtain sensitive information via a direct request for "spyce/examples/automaton.spy", which reveals the path in an error message.

Recommendations For version 2.1.3, consider restricting access to the "spyce/examples/automaton.spy" endpoint to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploitability

Exploit

Impacts

Researchers

Bruno Kovacs

Jan Fry

Richard Brain

Vendors

Affected products

Weakness enumeration

CWE-20: Improper Input Validation

Related identifiers