Description

One or more strings matching an internal IPv4 address were found. These IPv4 addresses may disclose information about the IP addressing scheme of the internal network. This information can be used to conduct further attacks.

The significance of this finding should be confirmed manually.

Remediation

Prevent this information from being displayed to the user.

References

Internal IP Address Disclosure | Invicti

Related Vulnerabilities

WordPress Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2016-5835)

Tomcat status page

Elasticsearch service accessible

WordPress Plugin ShareYourCart Information Disclosure (1.6.1)

WordPress Plugin Video Embed & Thumbnail Generator Information Disclosure (1.1)

Severity

Low

Classification

CWE-200 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N

Tags

Information Disclosure Internal IP Disclosure