Use of GET Request Method With Sensitive Query Strings

The web application uses the HTTP GET method to process a request and includes sensitive information in the query string of that request.

CVEs (102)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2017-3185 1Acti 1Camera Firmware May 13, 2026 Dec 16, 2017 N/A· v4 9.8 CRITICAL· v3 5.0 MEDIUM· v2 ACTi cameras including the D, B, I, and E series using firmware version A1D-500-V6.11.31-AC have a web application that uses the GET method to process requests that contain sensitive information such as user account name...Show more ACTi cameras including the D, B, I, and E series using firmware version A1D-500-V6.11.31-AC have a web application that uses the GET method to process requests that contain sensitive information such as user account name and password, which can expose that information through the browser's history, referrers, web logs, and other sources.Show less
CVE-2017-8443 1Elastic 1Kibana May 13, 2026 Jun 30, 2017 N/A· v4 6.5 MEDIUM· v3 4.3 MEDIUM· v2 In Kibana X-Pack security versions prior to 5.4.3 if a Kibana user opens a crafted Kibana URL the result could be a redirect to an improperly initialized Kibana login screen. If the user enters credentials on this screen...Show more In Kibana X-Pack security versions prior to 5.4.3 if a Kibana user opens a crafted Kibana URL the result could be a redirect to an improperly initialized Kibana login screen. If the user enters credentials on this screen, the credentials will appear in the URL bar. The credentials could then be viewed by untrusted parties or logged into the Kibana access logs.Show less

CVE

VENDORS

PRODUCTS

UPDATED

PUBLISHED

CVSS

CVE-2017-3185

1Acti

1Camera Firmware

May 13, 2026

Dec 16, 2017

N/A· v4

9.8 CRITICAL· v3

5.0 MEDIUM· v2

ACTi cameras including the D, B, I, and E series using firmware version A1D-500-V6.11.31-AC have a web application that uses the GET method to process requests that contain sensitive information such as user account name and password, which can expose that information through the browser's history, referrers, web logs, and other sources.Show less

CVE-2017-8443

1Elastic

1Kibana

May 13, 2026

Jun 30, 2017

N/A· v4

6.5 MEDIUM· v3

4.3 MEDIUM· v2

In Kibana X-Pack security versions prior to 5.4.3 if a Kibana user opens a crafted Kibana URL the result could be a redirect to an improperly initialized Kibana login screen. If the user enters credentials on this screen, the credentials will appear in the URL bar. The credentials could then be viewed by untrusted parties or logged into the Kibana access logs.Show less

Previous 1 2 3 4 56