Wavemaker: Security Vulnerabilities
com/wavemaker/studio/StudioService.java in WaveMaker Studio 6.6 mishandles the studioService.download?method=getContent&inUrl= value, leading to disclosure of local files and SSRF.
CVSS Score
9.6
EPSS Score
0.811
Published
2019-02-21