Description

WebPageTest is a web performance tool that uses real browsers to access web pages.

WebPageTest is designed to be accessed by privileged users only. It's not recommended to have WebPageTest publicly accessible.

Remediation

Restrict access to WebPageTest

References

WebPageTest

Related Vulnerabilities

WordPress Plugin Unyson Information Disclosure (2.7.18)

[Possible] Database Connection String Detected

WordPress Plugin U BuddyPress Forum Attachment 'fileurl' Parameter Remote File Disclosure (1.1.1)

Twisted Web HTTP Server Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2022-21712)

WordPress 3.7.x Multiple Vulnerabilities (3.7 - 3.7.14)

Severity

Medium

Classification

CWE-200 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N

Tags

Configuration Information Disclosure