CVE-2025-29157

An issue in petstore v.1.0.7 allows a remote attacker to achieve arbitrary code execution by accessing a non-existent /cart endpoint. The server responds with a 404-error page that exposes sensitive information, specifically the Servlet name (default) and the server version . At this time, there ...

PT-2025-39440

Name of the Vulnerable Software and Affected Versions petstore version 1.0.7 Description An issue allows a remote attacker to execute arbitrary code by accessing a non-existent endpoint /cart. The server responds with a 404-error page that reveals sensitive information, including the Servlet name...