VULNERABILITY INTELLIGENCE

CVE-2023-45957

CVSS score5.4 MEDIUM
EPSS probability0.72%
CISA KEVNot currently listed
Published2023-12-22
Last modified2026-06-17

Description

An information exposure vulnerability has been found, the exploitation of which could allow a remote user to retrieve sensitive information stored on the server such as credential files, configuration files, application files, etc., simply by appending any of the following parameters to the end of the URL: %00 %0a, %20, %2a, %a0, %aa, %c0 and %ca.