Skip to content
OpenAdvisories

Vendor

macropay-solutions

2 known vulnerabilities.

1 result · Clear filters · Feed

  • Medium 6.9

    Maravel-Framework Vulnerable to Side-Channel Information Disclosure (Error Oracle) via Dynamic Route Fuzzing

    Maravel, a PHP framework oriented towards dependency injection, prior to version 10.73.1 has a side-channel information disclosure issue. When a route was compiled with dynamic placeholders (e.g., `/api/v1/users/{id}`), the raw string placeholder key was mist…