11 matches found
GHSA-V853-P72Q-4CFW Quart leaks raw request body (incl. plaintext passwords) to stdout via stray debug print in Body.__await__
Summary Quart 0.23.0 contains a stray debug statement printdata inside Body.await in quart/wrappers/request.py. Any request whose body is awaited — await request.form, await request.getdata, WTForms validateonsubmit, etc. — has its raw, unparsed body printed to stdout, including plaintext form...
7.5CVSS6AI score
SaveExploits0References4
20