Lucene search
+L

1 matches found

Github Security Blog
Github Security Blog
added 2024/09/03 9:1 p.m.41 views

Hoverfly allows an arbitrary file read in the `/api/v2/simulation` endpoint (`GHSL-2023-274`)

Details The /api/v2/simulation POST handler allows users to create new simulation views from the contents of a user-specified file. This feature can be abused by an attacker to read arbitrary files from the Hoverfly server. go...

7.5CVSS6.9AI score0.5585EPSS
SaveExploits3References6Affected Software1
Rows per page
Query Builder