Xmpp-http-upload Project

Xmpp-http-upload

1 vulnerability found

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
4

CVE-2020-15239

  • EPSS 0.13%
  • Published 06.10.2020 19:15:13
  • Last modified 21.11.2024 05:05:09

In xmpp-http-upload before version 0.4.0, when the GET method is attacked, attackers can read files which have a `.data` suffix and which are accompanied by a JSON file with the `.meta` suffix. This can lead to Information Disclosure and in some shar...