HexBrain

Unikrn · Report #591002

Full Path Disclosure

Informativestatus
mediumseverity
5upvotes
29 May 2019disclosed

How it was found

HI security team!

we can see path on your resource.

https://crm.unikrn.com/app/bundles/CampaignBundle/EventListener/LeadSubscriber.php

You must create a ban on viewing the script from the outside using .htaccess

Impact

Full Path Disclosure

https://www.owasp.org/index.php/Full_Path_Disclosure

This report was disclosed publicly on HackerOne and belongs to its author and the program. See the original