An issue in Anglaise Company Anglaise.Company v.13.6.1 allows a remote malicious user to obtain sensitive information via crafted GET request.
linecorp line 13.6.1