CVE-2019-8982

WaveMaker Studio 6.6 is vulnerable to Local File Inclusion (LFI) and Server-Side Request Forgery (SSRF) due to the improper handling of the studioService.download?method=getContent&inUrl= parameter in com/wavemaker/studio/StudioService.java. An attacker can exploit this flaw to access sensitive l...