Home
Trends
Vulnerabilities
News
Researchers
Why dbugs?

Gibkigonzo

#48043of 53,633
5.3Total CVSS
Vulnerabilities · 1
PT-2020-12917
5.3
2020-04-17
Divante · Vue-Storefront-Api · CVE-2020-11883
**Name of the Vulnerable Software and Affected Versions** Divante vue-storefront-api versions 1.11.1 and earlier Divante storefront-api versions 1.0-rc.1 and earlier **Description** The issue arises from unexpected HTTP requests that lead to an exception, resulting in the disclosure of the error stack trace. This error stack trace includes absolute file paths and Node.js module names. **Recommendations** For Divante vue-storefront-api versions 1.11.1 and earlier, consider implementing error handling to prevent the disclosure of sensitive information in the error stack trace. For Divante storefront-api versions 1.0-rc.1 and earlier, restrict access to error messages that may contain absolute file paths and Node.js module names to minimize the risk of exploitation.