ZDI-24-408: Oracle VirtualBox Web Service Exposure of Resource to Wrong Sphere Information Disclosure Vulnerability