Description

The web application uses Laravel framework. Laravel Telescope is enabled and accessible. In production environment, it leads to disclosure of sensitive information about the web application.

Remediation

Disable the Telescope or restrict access to it

References

Laravel Telescope

Related Vulnerabilities

WordPress 4.6.x Multiple Vulnerabilities (4.6 - 4.6.24)

Apache Axis2 web services enumeration

WordPress Plugin Fast Velocity Minify Information Disclosure (2.7.6)

WordPress Plugin Email Subscribers by Icegram Express-Email Marketing, Newsletters, Automation for WordPress & WooCommerce Information Disclosure (3.4.7)

WordPress Plugin BuddyPress Multiple Vulnerabilities (9.0.0)

Severity

Medium

Classification

CWE-200 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:N CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N

Tags

Information Disclosure