Uzbey · Report #17297

CMS Information Disclosure

Validstatus

3upvotes

7 Aug 2014disclosed

How it was found

Hi,

I noticed that the CHANGELOG.txt disclose Drupal vesion. It might help an attacker to perform information gathering and help an attacker to find the vulnerabilties from the version.

PoC: https://staging.uzbey.com/CHANGELOG.txt

This report was disclosed publicly on HackerOne and belongs to its author and the program. See the original