critical9.6Public exploit code
CVE-2019-8982
com/wavemaker/studio/StudioService.java in WaveMaker Studio 6.6 mishandles the studioService.download?method=getContent&inUrl= value, leading to disclosure of …
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Wavemaker Studio 6.6 - Server-Side Request Forgery2018-08-06 · webapps · java
Impact
com/wavemaker/studio/StudioService.java in WaveMaker Studio 6.6 mishandles the studioService.download?method=getContent&inUrl= value, leading to disclosure of local files and SSRF.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Wavemaker | Wavemarker Studio | Version 6.6 |