| عنوان | a2aproject a2a-java ≤ v1.2.0.Final CWE-209 |
|---|
| الوصف | JSONRPCHandler converted every unexpected (non-A2AError) exception into new InternalError(t.getMessage()), forwarding the raw exception message — often containing file paths, library names, or class names — to the client in the JSON-RPC error payload (CWE-209, information disclosure / server fingerprinting). |
|---|
| المصدر | ⚠️ https://github.com/a2aproject/a2a-java/pull/1046 |
|---|
| المستخدم | colorfullbz (UID 86308) |
|---|
| ارسال | 06/10/2026 04:01 AM (22 أيام منذ) |
|---|
| الاعتدال | 26/10/2026 12:00 PM (20 days later) |
|---|
| الحالة | تمت الموافقة |
|---|
| إدخال VulDB | 426392 [a2aproject a2a-java حتى 1.2.0.Final JSON-RPC Error getMessage الكشف عن المعلومات] |
|---|
| النقاط | 19 |
|---|