HexBrain

Stripe · Report #1560149

Tomcat Servlet Examples accessible at https://44.240.33.83:38443 and https://52.36.56.155:38443

Validstatus
mediumseverity
39upvotes
19 Oct 2022disclosed

Summary

Tomcat Servlet Examples were accessible from the internet. This report demonstrated that it was possible to disclose IP addresses of internal application servers.

How it was found

The write-up for this report has not been downloaded yet, or the program disclosed it without one. Read it on HackerOne.

This report was disclosed publicly on HackerOne and belongs to its author and the program. See the original