Design/Logic Flaw

2024-01-1302:15:00

PRIOn knowledge base

www.prio-n.com

rymcu forest v.0.02

remote attacker

sensitive information

manipulation

http body url

uploadcontroller

nvd

6.7 Medium

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

44.9%

JSON

An issue in rymcu forest v.0.02 allows a remote attacker to obtain sensitive information via manipulation of the HTTP body URL in the com.rymcu.forest.web.api.common.UploadController file.

CPENameOperatorVersion
foresteq0.02

CPE	Name	Operator	Version
	forest	eq	0.02

References

github.com/rymcu/forest/issues/149