HexBrain

RATELIMITED · Report #461598

Information Disclosure on https://theendlessweb.com/

Validstatus
7upvotes
15 Dec 2018disclosed

How it was found

Dear Team,

I have found an Information Disclosure Vulnerabilities at https://theendlessweb.com/

Step to Reproduce:

Step 1: https://theendlessweb.com/vendor/composer/installed.json

Let me know if you need any additional information.

Regards, Dhamu.

Impact

This file expose sensitive information that could help a malicious user to prepare more advanced attacks.

This report was disclosed publicly on HackerOne and belongs to its author and the program. See the original