PT-2022-8291
CVE-2019-25069
·
Published
2022-06-09
·
Updated
2022-06-16
Description by
CVSS 3.1
7.5
HighMetricsAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Name of the Vulnerable Software and Affected Versions
Axios Italia Axios RE versions 1.7.0 through 7.0.0
Description
The issue affects the Error Message Handler component, leading to information disclosure, specifically ASP.NET. The manipulation can be initiated remotely.
Recommendations
For versions 1.7.0 through 7.0.0, consider restricting access to the Error Message Handler component to minimize the risk of exploitation. As a temporary workaround, avoid using the Error Message Handler until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Found an issue in the description? Have something to add? Feel free to write us 👾