Paragon Initiative Enterprises · Report #226343
Full Path Disclosure in airship.paragonie.com '/cabins/'
Informativestatus
16 Oct 2017disclosed
How it was found
Hello Team,
first am so sorry if i test this in your site, since i got problem to install in my own. So when i see your blog i got end point to https://airship.paragonie.com which is "Powered By Airship" or made using Airship CMS.
step To Reproduce
- register an account
- navigate to
https://airship.paragonie.com/my/cabins - and you will get an error contains with full path of installations get disclosure like shown in images bellow
{F182099}
i am not sure this is your security concern but i need to report this and let you know.
Regards,