Description

The web application uses Symfony framework. Symfony Profiler is enabled and accessible. It leads to disclosure of sensitive information about the web application.

Remediation

Disable the Profiler or restrict access to it

References

Symfony Profiler

Related Vulnerabilities

WordPress Plugin BuddyPress Multiple Vulnerabilities (9.0.0)

Joomla! Core Information Disclosure (2.5.0 - 3.9.22)

Django Debug Toolbar

XOOPS Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2011-3822)

SAP NetWeaver server info information disclosure

Severity

Medium

Classification

CWE-200 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:N CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:L/SI:N/SA:N

Tags

Information Disclosure