22 matches found
GHSA-MH2X-FCQH-FMQV @sveltejs/kit has unescaped error message included on error page
Summary The static error.html template for errors contains placeholders that are replaced without escaping the content first. Details From https://kit.svelte.dev/docs/errors: error.html is the page that is rendered when everything else fails. It can contain the following placeholders:...
4.2CVSS6.7AI score0.00483EPSS
SaveExploits1References7
Microsoft ASP.NET Information Disclosure Vulnerability
Microsoft .NET Framework is a system distributed by Microsoft to help developers build WEB-based applications. An information disclosure vulnerability exists in Microsoft ASP.NET. On systems with the customErrors configuration disabled, ASP.NET errors when processing requests for certain...
2.6CVSS6.1AI score0.34646EPSS
SaveExploits0References1
20