Lucene search
+L

1 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/10/01 12:00 a.m.•3 views

CVE-2020-15666: Generation of Error Message Containing Sensitive Information

When trying to load a non-video in an audio/video context the exact status code 200, 302, 404, 500, 412, 403, etc. was disclosed via the MediaError Message. This level of information leakage is inconsistent with the standardized onerror/onsuccess disclosure and can lead to inferring login status ...

6.5CVSS5.8AI score0.01228EPSS
SaveExploits1References8
Rows per page
Query Builder