CVE-2020-11883

Name of the Vulnerable Software and Affected Versions Divante vue-storefront-api versions 1.11.1 and earlier Divante storefront-api versions 1.0-rc.1 and earlier

Description The issue arises from unexpected HTTP requests that lead to an exception, resulting in the disclosure of the error stack trace. This error stack trace includes absolute file paths and Node.js module names.

Recommendations For Divante vue-storefront-api versions 1.11.1 and earlier, consider implementing error handling to prevent the disclosure of sensitive information in the error stack trace. For Divante storefront-api versions 1.0-rc.1 and earlier, restrict access to error messages that may contain absolute file paths and Node.js module names to minimize the risk of exploitation.