Description (CNA)
WeGIA is a web manager for charitable institutions. In versions prior to 3.7.0, atendido/familiar_docfamiliar.php displays an overly descriptive error message, including database-related details. This verbosity leads to information disclosure, which could assist a potential attacker in mapping the backend infrastructure and expanding the attack surface. This vulnerability is fixed in 3.7.0.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| LabRedesCefetRJ / WeGIA | affected < 3.7.0 |
CWE
CWE-200
References
ADP enrichment
No English description supplied.