Unikrn · Report #591002
Full Path Disclosure
Informativestatus
mediumseverity
5upvotes
29 May 2019disclosed
How it was found
HI security team!
we can see path on your resource.
https://crm.unikrn.com/app/bundles/CampaignBundle/EventListener/LeadSubscriber.php
You must create a ban on viewing the script from the outside using .htaccess
Impact
Full Path Disclosure