HexBrain

Aspen · Report #272982

Information leakage on django.aspen.io

N/Astatus
2upvotes
29 Sept 2017disclosed

How it was found

Hi Team,

I got a error message that disclose the version of nginx with OS detail, since The version of nginx is vulnerable to integer overflow. Impact: By seeing this information attacker can throw only interger overflow attack in order to get sensitive information Finally Request you to remove those Information while throwing an error.

Note: I attached POC in the attachment.

Thank you.

This report was disclosed publicly on HackerOne and belongs to its author and the program. See the original