Description

The web application uses Symfony framework. Symfony Profiler is enabled and accessible. It leads to disclosure of sensitive information about the web application.

Remediation

Disable the Profiler or restrict access to it

References

Symfony Profiler

Related Vulnerabilities

WordPress Plugin RocketTheme RokBox Multiple Vulnerabilities (2.13)

WordPress Plugin Contact Form Email Information Disclosure (1.2.66)

PHP Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2015-3412)

Unrestricted access to Kong Gateway API

Stack Trace Disclosure (RoR)

Severity

Medium

Classification

CWE-200 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:N CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:L/SI:N/SA:N

Tags

Information Disclosure