CVE-2023-5515CWE-200

The responses for web queries with certain parameters disclose internal path of resources

Medium · published November 1, 2023

CVSS v3.1
5.3
EPSS
0%
Percentile
30.4
In the wild
Unconfirmed
What it is

The responses for web queries with certain parameters disclose internal path of resources. This information can be used to learn internal structure of the application and to further plot attacks against

web servers and deployed web applications.

The record
Technical detail
CVSS v3.1
5.3 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00377 · 30.4th percentile
Weakness
CWE-200 · Exposure of Sensitive Information to an Unauthorized Actor
Published
2023-11-01T02:49Z
EPSS history
Timeline
  • 01 NOV 02:49Z
    The responses for web queries with certain parameters disclose internal path of resources
    cvelistv5