Trevorc2 · Trevorc2 · CVE-2019-18850
**Name of the Vulnerable Software and Affected Versions**
TrevorC2 versions 1.1 through 1.2
**Description**
The issue arises from a discrepancy in response headers when responding to different HTTP methods. Additionally, predictable responses occur when accessing and interacting with the `SITE PATH QUERY`. This allows for potential fingerprinting.
**Recommendations**
For TrevorC2 versions 1.1 through 1.2, as a temporary workaround, consider restricting access to the `SITE PATH QUERY` to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.