Simply Static - Information Disclosure
Patrick Posner Simply Static versions up to 3.1.3 contain a vulnerability for insertion of sensitive information into log files caused by improper handling of log data, letting attackers potentially access sensitive information, exploit requires no specific privileges.
PoC 已收录simply-static
CVSS7.5EPSS 2.0%