Description

The web application uses Laravel framework. Laravel LogViewer is enabled and accessible. In production environment, it leads to disclosure of sensitive information about the web application.

Remediation

Disable the LogViewer or restrict access to it

References

ARCANEDEV LogViewer

Related Vulnerabilities

WordPress 4.3.x Multiple Vulnerabilities (4.3 - 4.3.29)

Vulnerable project dependencies

Python Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2021-3426)

Unrestricted access to NGINX+ Status module

WordPress Plugin Cherry Team Members Information Disclosure (1.4.1)

Severity

Medium

Classification

CWE-200 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:N CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N

Tags

Configuration Information Disclosure