HexBrain

Autodesk · Report #3002345

Exposing debug.log file leads to server full path disclosure

Validstatus
lowseverity
56upvotes
6 Mar 2025disclosed

Summary

A publicly accessible debug WordPress log file was discovered on wonderdynamics.com. Autodesk fixed the issue and we thank @kanon4 for reporting the issue.

How it was found

The write-up for this report has not been downloaded yet, or the program disclosed it without one. Read it on HackerOne.

This report was disclosed publicly on HackerOne and belongs to its author and the program. See the original