Lucene search
Veracode Vulnerability DatabaseVERACODE:13603HistoryApr 08, 2019 - 2:11 a.m.
Information Disclosure
2019-04-0802:11:34
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
3
0.001 Low
EPSS
Percentile
47.6%
harp is vulnerable to information disclosure. A remote attacker is able to retrieve files within the web root that are marked as ignored using a URL encoded underscore character %5f, e.g %5fsecret.txt
Related
nvd
nvd
CVE-2019-5437
2019-05-10 22:29:00
cve
cve
CVE-2019-5437
2019-05-10 22:29:00
osv
osv
Unauthorized File Access in harp
2019-06-13 16:12:22
prion
prion
Information disclosure
2019-05-10 22:29:00
github
github
Unauthorized File Access in harp
2019-06-13 16:12:22
hackerone
hackerone
cvelist
cvelist
CVE-2019-5437
2019-05-10 21:07:37