Vulnerabilities
Grav CMS Information Disclosure via Twig Sandbox Bypass in Page Frontmatter
Page editors in Grav CMS versions before 2.2.2 can expose sensitive configuration data to all visitors through a frontmatter directive bypass.
Information Disclosure
Everything Firewall Pulse has reported about Information Disclosure: 2 stories, newest first. Part of our Vulnerabilities coverage.
Vulnerabilities
Vulnerabilities
Eclipse Jetty Proxy Credential Exposure: Upstream 407 Errors Cause Client Header Leak in Versions Prior to 12.1.12
A flaw in Eclipse Jetty allows destination servers to capture proxy credentials when the client misinterprets authentication errors from upstream services.