HexBrain

Paragon Initiative Enterprises · Report #226343

Full Path Disclosure in airship.paragonie.com '/cabins/'

Informativestatus
16 Oct 2017disclosed

How it was found

Hello Team,

first am so sorry if i test this in your site, since i got problem to install in my own. So when i see your blog i got end point to https://airship.paragonie.com which is "Powered By Airship" or made using Airship CMS.

step To Reproduce

  1. register an account
  2. navigate to https://airship.paragonie.com/my/cabins
  3. and you will get an error contains with full path of installations get disclosure like shown in images bellow

{F182099}

i am not sure this is your security concern but i need to report this and let you know.

Regards,

This report was disclosed publicly on HackerOne and belongs to its author and the program. See the original