33 matches found
Quart leaks raw request body (incl. plaintext passwords) to stdout via stray debug print in Body.__await__
Summary Quart 0.23.0 contains a stray debug statement printdata inside Body.await in quart/wrappers/request.py. Any request whose body is awaited — await request.form, await request.getdata, WTForms validateonsubmit, etc. — has its raw, unparsed body printed to stdout, including plaintext form...
6AI score
SaveExploits0References4Affected Software1
20