U.S. Dept Of Defense · Report #707228
Internal IP Address Disclosed
How it was found
Target Url https://███████/███████/static/pubsite/js/main-header-dropdown.js?ver=0.87
Summary Hello, I found an internal IP address disclosure in the page.
Description:
Extracted ip address: ████████
extracted port: ██████
place where I found it: var logoutUrl = 'https://██████:███/█████/logout'
Step-by-step Reproduction Instructions
- Navigate to the target url and search for the ip and you will find it. █████████
Suggested Mitigation/Remediation Actions
Avoid disclosing private ip addresses in public codes.
Impact
Honestly there is no direct impact; however, I found that I should tell you about it in ██████e you don't know about this issue because this information can help an attacker identify other vulnerabilities or help during the exploitation of other identified vulnerabilities.
Best Regards