emoncms v11 and later was discovered to contain an information disclosure vulnerability which allows attackers to obtain the web directory path and other information leaked by the server via a crafted web request.
The product exposes a resource to the wrong control sphere, providing unintended actors with inappropriate access to the resource.
The product behaves differently or sends different responses under different circumstances in a way that is observable to an unauthorized actor, which exposes security-relevant information about the state of the product, such as whether a particular operation was successful or not.
| Link | Tags |
|---|---|
| https://github.com/emoncms/emoncms/issues/1856 | issue tracking exploit |