1 matches found
uri: URI module: Credential exposure via URI + operator
A flaw was found in the URI module. A remote attacker could exploit this vulnerability by using the + operator to combine Uniform Resource Identifiers URIs. This bypasses a previous fix and can lead to the leakage of sensitive information, such as user credentials passwords, from the original URI...
7.5CVSS5.8AI score0.00531EPSS
SaveExploits0References9
20