Information Disclosure

2024-04-1507:05:25

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

information disclosure

improper handling

user input

sensitive information

software

6.6 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.1%

JSON

reportico-web/reportico is vulnerable to Information Disclosure. The vulnerability is due to improper handling of user input within the execute_mode parameter of the URL, which allows attackers obtain sensitive information.

CPENameOperatorVersion
reportico-web/reporticole8.1.0
reportico-web/reporticole8.1.0

CPE	Name	Operator	Version
	reportico-web/reportico	le	8.1.0
	reportico-web/reportico	le	8.1.0

References

gist.github.com/aashiqahamedn/39383cfbc639cbdc3e1a7d74b977aeae

github.com/advisories/GHSA-pww3-x2g7-x8q2

github.com/reportico-web/reportico/issues/51