| Título | a2aproject a2a-dotnet ≤ v1.0.0-preview2 CWE-209 |
|---|
| Descripción | A2AJsonRpcProcessor.ProcessRequestAsync caught JsonException and returned ParseErrorResponse(errorId, ex.Message), propagating the raw parser exception message to the client. System.Text.Json messages embed input paths, line numbers, byte positions, and library names, enabling server fingerprinting and information disclosure (CWE-209). |
|---|
| Fuente | ⚠️ https://github.com/a2aproject/a2a-dotnet/pull/452 |
|---|
| Usuario | colorfullbz (UID 86308) |
|---|
| Sumisión | 2026-10-06 04:02 (hace 21 días) |
|---|
| Moderación | 2026-10-26 11:59 (20 days later) |
|---|
| Estado | Aceptado |
|---|
| Entrada de VulDB | 426390 [a2aproject a2a-dotnet hasta 1.0.0-preview2 Parser A2AJsonRpcProcessor.cs A2AJsonRpcProcessor.ProcessRequestAsync divulgación de información] |
|---|
| Puntos | 19 |
|---|