CVE-2019-8982: Server-Side Request Forgery (SSRF)

com/wavemaker/studio/StudioService.java in WaveMaker Studio 6.6 mishandles the studioService.download?method=getContent&inUrl= value, leading to disclosure of local files and SSRF...

PT-2019-19285

Name of the Vulnerable Software and Affected Versions WaveMaker Studio version 6.6 Description The issue in WaveMaker Studio arises from the mishandling of the studioService.download method, specifically with the inUrl parameter. This mishandling leads to the disclosure of local files and enables...