| عنوان | a2aproject a2a-dotnet ≤ v1.0.0-preview2 CWE-209 |
|---|
| الوصف | A2AJsonRpcProcessor.ProcessRequestAsync caught JsonException and returned ParseErrorResponse(errorId, ex.Message), propagating the raw parser exception message to the client. System.Text.Json messages embed input paths, line numbers, byte positions, and library names, enabling server fingerprinting and information disclosure (CWE-209). |
|---|
| المصدر | ⚠️ https://github.com/a2aproject/a2a-dotnet/pull/452 |
|---|
| المستخدم | colorfullbz (UID 86308) |
|---|
| ارسال | 06/10/2026 04:02 AM (22 أيام منذ) |
|---|
| الاعتدال | 26/10/2026 11:59 AM (20 days later) |
|---|
| الحالة | تمت الموافقة |
|---|
| إدخال VulDB | 426390 [a2aproject a2a-dotnet حتى 1.0.0-preview2 Parser A2AJsonRpcProcessor.cs A2AJsonRpcProcessor.ProcessRequestAsync الكشف عن المعلومات] |
|---|
| النقاط | 19 |
|---|