Description

The web application uses Laravel framework. Laravel Telescope is enabled and accessible. In production environment, it leads to disclosure of sensitive information about the web application.

Remediation

Disable the Telescope or restrict access to it

References

Laravel Telescope

Related Vulnerabilities

WordPress Plugin SSL Insecure Content Fixer Information Disclosure (2.0.0)

WordPress 5.0.x Multiple Vulnerabilities (5.0 - 5.0.19)

WordPress readme.html file

TYPO3 Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2012-1607)

Dotenv .env file

Severity

Medium

Classification

CWE-200 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:N CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N

Tags

Information Disclosure