VYPR

Studioservice.java

by Wavemaker Studio

CVEs (1)

  • CVE-2019-8982Feb 21, 2019
    risk 0.10cvss epss 0.26

    com/wavemaker/studio/StudioService.java in WaveMaker Studio 6.6 mishandles the studioService.download?method=getContent&inUrl= value, leading to disclosure of local files and SSRF.