Corda Highwire - 'Highwire.ashx' Full Path Disclosure

EDB-ID:

38653

CVE:

N/A




Platform:

ASP

Date:

2013-07-12


source: https://www.securityfocus.com/bid/61152/info

Corda Highwire is prone to a path disclosure vulnerability because it fails to properly sanitize user-supplied input.

An attacker can exploit this issue to obtain sensitive information that may lead to further attacks. 

http://www.example.com/highwire.ashx?url=../../