CVE-2019-8982
com/wavemaker/studio/StudioService.java in WaveMaker Studio 6.6 mishandles the studioService.download?method=getContent&inUrl= value, leading to disclosure of local files and SSRF.
CVSS 3.0 · 9.6 Critical
EPSS 28.0%
KEV · Not listed
Vendors
Products