Description

The web application uses Symfony framework. Symfony Profiler is enabled and accessible. It leads to disclosure of sensitive information about the web application.

Remediation

Disable the Profiler or restrict access to it

References

Symfony Profiler

Related Vulnerabilities

WordPress Plugin ContentStudio Multiple Vulnerabilities (1.2.5)

WordPress Plugin Advanced Contact form 7 DB Information Disclosure (1.6.2)

IBM WebSphere administration console weak password

Arbitrary local file read via file upload

Zope Web Application Server Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2023-41050)

Severity

Medium

Classification

CWE-200 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:N CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:L/SI:N/SA:N

Tags

Information Disclosure