U.S. Dept Of Defense · Report #1631471
an internel important paths disclosure [HtUS]
Validstatus
mediumseverity
2upvotes
14 Sept 2022disclosed
How it was found
Summary:
i found CGI script environment variable disclosure an important paths
Steps To Reproduce:
- visit this link : https://███
- look at poc pic
you should restrict this quickly
Impact
this is so dangerous because attacker now know an internal paths and this juicy information as u can see in poc pic he know now the mysql path , openssl config server admin and more ... etc