Description

One or more pages were found to contain an ColdFusion error message that discloses the installation path and other potentially sensitive data.

Remediation

Review the source code for the affected pages.

References

OWASP - Information Disclosure

Adobe ColdFusion - Lockdown Guide

Related Vulnerabilities

PHP curl_exec() url is controlled by user

Python Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2021-3426)

WordPress Plugin WP Hide & Security Enhancer Arbitrary File Download (1.3.9.2)

WordPress Plugin BulletProof Security Information Disclosure (5.1)

[Possible] Internal Path Disclosure (*nix)

Severity

Low

Classification

CWE-200 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N

Tags

Information Disclosure