CVE-2020-11883

In Divante vue-storefront-api through 1.11.1 and storefront-api through 1.0-rc.1, as used in VueStorefront PWA, unexpected HTTP requests lead to an exception…

published April 17, 2020

CVSS
—
EPSS
15%
Percentile
96.7
In the wild
Unconfirmed
What it is

In Divante vue-storefront-api through 1.11.1 and storefront-api through 1.0-rc.1, as used in VueStorefront PWA, unexpected HTTP requests lead to an exception that discloses the error stack trace, with absolute file paths and Node.js module names.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.15150 · 96.7th percentile
Published
2020-04-17T18:39Z
EPSS history
Timeline
  • 17 APR 18:39Z
    In Divante vue-storefront-api through 1.11.1 and storefront-api through 1.0-rc.1, as used in VueStorefront PWA, unexpected HTTP requests lead to an exception…
    cvelistv5