MariaDB · Report #775504
Exposed debug.log file leads to information disclosure
Informativestatus
mediumseverity
4upvotes
15 Jan 2020disclosed
How it was found
At the following address i have found debug.log file disclose the application full path on the server. And there is database username too in debug.log
http://mariadb.org/wp-content/debug.log
Impact
Information disclosure