Details | |
---|---|
Alert ID | 100029 |
Alert Type | Script Active |
Status | alpha |
Risk | High |
CWE | 74 |
WASC | 33 |
Technologies Targeted | All |
Tags |
CWE-74 OWASP_2017_A01 OWASP_2021_A03 WSTG-V42-ATHZ-01 |
More Info |
Scan Rule Help |
Summary
The application seems to be subject to CVE-2019-5418. By sending a specially crafted request it was possible to have the target return data from the server file system.