Unscored CVE-2008-6521 EUVD-2008-6488GHSA-ccgr-4vvf-g3vr

index.php in Terracotta (aka OpenTerracotta) 0.6.1 allows remote attackers to obtain sensitive information via an invalid File parameter, w…

Published Mar 25, 2009 · Updated Aug 7, 2024 · Assigned by mitre

Description

index.php in Terracotta (aka OpenTerracotta) 0.6.1 allows remote attackers to obtain sensitive information via an invalid File parameter, which reveals the installation path in an error message.

References

terracotta-file-path-disclosure(41571) vdb-entry
20080401 Terracotta Personal Edition Multiple vulnerabilities mailing-list