HexBrain

MariaDB · Report #775504

Exposed debug.log file leads to information disclosure

Informativestatus
mediumseverity
4upvotes
15 Jan 2020disclosed

How it was found

At the following address i have found debug.log file disclose the application full path on the server. And there is database username too in debug.log

http://mariadb.org/wp-content/debug.log

Impact

Information disclosure

This report was disclosed publicly on HackerOne and belongs to its author and the program. See the original