Tidewave Phoenix information disclosure vulnerability

Versions of Tidewave Phoenix from 0.8.0 up to but not including 0.9.2 contain an information disclosure vulnerability. This vulnerability stems from a lack of validation on the Host header. Attackers can exploit this to read the application’s file system paths via /Tidewave Phoenix/connect or the...