Threats tagged 'ghsa-549x-5p4h-q5jp'

Prior to September 19, 2025, the Hospital Manager Backend Services exposed detailed ASP.NET error pages for invalid WebResource.axd requests. These error pages disclosed sensitive information including framework and ASP.NET version details, stack traces, internal file paths, and revealed that the 'customErrors' configuration was set to 'Off'. This verbose error reporting could have aided unauthenticated attackers in reconnaissance activities.