Description

The web application uses Laravel framework. Laravel Terminal is enabled and accessible. In production environment, it leads to disclosure of sensitive information about the web application.

Remediation

Disable the Terminal or restrict access to it

References

Laravel Terminal

Related Vulnerabilities

WordPress Plugin Fusion Engage Local File Disclosure (1.0.5)

Joomla! Core 2.5.x Information Disclosure (2.5.0 - 2.5.3)

[Possible] Internal Path Disclosure (Windows)

XML external entity injection via File Upload

MySQL connection credentials

Severity

High

Classification

CWE-200 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

Tags

Information Disclosure Configuration