HexBrain

Paragon Initiative Enterprises · Report #148768

Nginx Version Disclosure On Forbidden Page

Informativestatus
2upvotes
1 Jul 2016disclosed

Summary

This is expected behavior. Also, to any hackers reading this: our website is not in scope for the bug bounty program. Focus on our open source projects on Github please. We care about the security of people who use our libraries.

How it was found

Hi,

PoC

1- Go that link you'll see the version of nginx server

https://paragonie.com/static/highlightjs/

This report was disclosed publicly on HackerOne and belongs to its author and the program. See the original