Weakness (CWE)
CWE-535: Exposure of Information Through Shell Error Message
Variant Incomplete
A command shell error message indicates that there exists an unhandled exception in the web application code. In many cases, an attacker can leverage the conditions that cause these errors in order to gain unauthorized access to the system.
Source: MITRE CWE-535
3 results · Feed
-
Low 3.7
HCL AION is affected by multiple security vulnerabilities.
HCL AION is affected by a vulnerability where pages served over HTTPS could be cached by the browser or intermediate proxies. Sensitive information in cached responses may be retrieved by an unauthorized user with access to the cache, potentially resulting in…
-
Medium 5.8
An information disclosure vulnerability has been discovered in GitLab EE/CE affecting all versions starting from 11.5 b…
-
Low 3.1
An issue has been discovered in GitLab affecting all versions starting from 11.10 before 15.8.5, all versions starting …