2 matches found
Information Exposure
Overview Affected versions of this package are vulnerable to Information Exposure through the logrequest function. This function recorded sensitive information from the query parameters without improper sanitization. Remediation Upgrade jupyter-server to version 1.23.6, 2.3.0 or higher. Reference...
6.9CVSS6.7AI score
SaveExploits0References3
Improper Removal of Sensitive Information Before Storage or Transfer
Overview OpenTelemetry.Instrumentation.Http is a Http instrumentation for OpenTelemetry .NET Affected versions of this package are vulnerable to Improper Removal of Sensitive Information Before Storage or Transfer due to the logging of sensitive query parameters by default. This behavior occurs...
4.1CVSS6.6AI score0.00291EPSS
SaveExploits0References2
20