Escapade Scripting Engine (ESP) allows remote attackers to obtain sensitive path information via a malformed request, which leaks the information in an error message, as demonstrated using the PAGE parameter.
Name | Vendor | Start Version | End Version |
---|---|---|---|
Escapade | Squished_mosquito | * | * |