Lucene search
+L

11 matches found

osv-ghsa
osv-ghsa
•added 2026/10/05 10:49 p.m.•6 views

GHSA-V853-P72Q-4CFW Quart leaks raw request body (incl. plaintext passwords) to stdout via stray debug print in Body.__await__

Summary Quart 0.23.0 contains a stray debug statement printdata inside Body.await in quart/wrappers/request.py. Any request whose body is awaited — await request.form, await request.getdata, WTForms validateonsubmit, etc. — has its raw, unparsed body printed to stdout, including plaintext form...

7.5CVSS6AI score
SaveExploits0References4
Rows per page
Query Builder