HexBrain

Mars · Report #2308654

Sensitive Information Exposed at █████

Validstatus
highseverity
33upvotes
30 Jan 2024disclosed

Summary

The issue involves a JavaScript file hosted at "█████" that exposes a configuration or environment variables object. This object contain crucial information such as settings, credentials, and paths related to the deployment and execution environment of a JavaScript application, suggesting a potential security risk. The exposed information may be associated with a Continuous Integration/Continuous Deployment (CI/CD) setup using GitLab. This exposure could lead to unauthorized access or manipulation of sensitive data, posing a security threat to the application and its environment.

How it was found

The write-up for this report has not been downloaded yet, or the program disclosed it without one. Read it on HackerOne.

This report was disclosed publicly on HackerOne and belongs to its author and the program. See the original