Description

WebPageTest is a web performance tool that uses real browsers to access web pages.

WebPageTest is designed to be accessed by privileged users only. It's not recommended to have WebPageTest publicly accessible.

Remediation

Restrict access to WebPageTest

References

WebPageTest

Related Vulnerabilities

WordPress 5.7.x Multiple Vulnerabilities (5.7 - 5.7.7)

The Heartbleed Bug

WordPress Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2011-0701)

WordPress Plugin WP Hide & Security Enhancer Arbitrary File Download (1.3.9.2)

Apache Tomcat version older than 7.0.23

Severity

Medium

Classification

CWE-200 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N

Tags

Configuration Information Disclosure