Description
The web application uses Laravel framework. Laravel Health Monitor is enabled and accessible. In production environment, it leads to disclosure of sensitive information about the web application.
Remediation
Disable the Health Monitor or restrict access to it
References
Related Vulnerabilities
OpenSSL Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2016-2178)
Apache Tomcat insecure default administrative password
PHP Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2010-2101)
WordPress Plugin Transposh WordPress Translation Multiple Vulnerabilities (1.0.8.1)
MediaWiki Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2020-35480)