Bandersnatch 0.4 allows remote malicious users to obtain sensitive information via a malformed request for index.php with (1) a certain func parameter value; or (2) certain func, jid, page, and limit parameter values; which reveals the path in various error messages.
Vulnerable Product | Search on Vulmon | Subscribe to Product |
---|---|---|
bandersnatch bandersnatch 0.4 |