5 matches found
PyLoad vulnerable to unauthenticated traceback disclosure via global exception handler in WebUI
Summarypyload-ng WebUI returns full Python traceback details to clients on unhandled exceptions.Because /web/ is reachable without authentication and renders attacker-controlled template names, an unauthenticated user can reliably trigger a server exception for example by requesting a non-existen...
5.3CVSS5.9AI score0.00407EPSS
SaveExploits1References5Affected Software1
20