Description

The web application uses Symfony framework. Symfony Profiler is enabled and accessible. It leads to disclosure of sensitive information about the web application.

Remediation

Disable the Profiler or restrict access to it

References

Symfony Profiler

Related Vulnerabilities

WordPress Plugin Mashshare-Social Media Icons SEO Share Buttons for Facebook, Twitter, Subscribe Information Disclosure (2.3.0)

WordPress Plugin W3 Total Cache Information Disclosure (0.9.2.4)

Unrestricted access to Prometheus Metrics

Plone CMS Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2012-5497)

MediaWiki multiple remote vulnerabilities

Severity

Medium

Classification

CWE-200 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:N CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:L/SI:N/SA:N

Tags

Information Disclosure