Wavemaker Studio 6.6 - Local File Inclusion/Server-Side Request Forgery Detection

WaveMaker Studio 6.6 mishandles the studioService.download?method=getContent&inUrl= value in com/wavemaker/studio/StudioService.java, leading to disclosure of local files and server-side request forgery. !/usr/bin/env python3 -- coding: utf-8 -- """WaveMaker Studio 6.""" import re from kittysploi...

CVE-2019-8982: Server-Side Request Forgery (SSRF)

com/wavemaker/studio/StudioService.java in WaveMaker Studio 6.6 mishandles the studioService.download?method=getContent&inUrl= value, leading to disclosure of local files and SSRF...

PT-2019-19285

Name of the Vulnerable Software and Affected Versions WaveMaker Studio version 6.6 Description The issue in WaveMaker Studio arises from the mishandling of the studioService.download method, specifically with the inUrl parameter. This mishandling leads to the disclosure of local files and enables...