Description

The web application uses Laravel framework. Laravel LogViewer is enabled and accessible. In production environment, it leads to disclosure of sensitive information about the web application.

Remediation

Disable the LogViewer or restrict access to it

References

ARCANEDEV LogViewer

Related Vulnerabilities

WordPress Plugin Email Subscribers by Icegram Express-Email Marketing, Newsletters, Automation for WordPress & WooCommerce Information Disclosure (3.4.7)

Ruby on Rails weak/known secret token

WordPress 4.3.x Multiple Vulnerabilities (4.3 - 4.3.31)

Pentaho API Auth bypass (CVE-2021-31602)

WebLogic admin console weak credentials

Severity

Medium

Classification

CWE-200 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:N CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N

Tags

Configuration Information Disclosure