Stripe · Report #1560149
Tomcat Servlet Examples accessible at https://44.240.33.83:38443 and https://52.36.56.155:38443
Validstatus
mediumseverity
39upvotes
19 Oct 2022disclosed
Summary
Tomcat Servlet Examples were accessible from the internet. This report demonstrated that it was possible to disclose IP addresses of internal application servers.
How it was found
The write-up for this report has not been downloaded yet, or the program disclosed it without one. Read it on HackerOne.