Stack Trace Disclosure (Laravel)

Summary

Netsparker identified a stack trace disclosure (Laravel) in the target web server's HTTP response.

Impact

An attacker can obtain information such as:

This information might help an attacker gain more information and potentially focus on the development of further attacks for the target system.

Remediation

Change your config/app.php file to disable debug mode:

	'debug' => env('APP_DEBUG', false)

Classifications

PCI v3.1-6.5.5, PCI v3.2-6.5.5, CAPEC-214, WASC-14, OWASP 2013-A5 , CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N/E:H/RL:O/RC:C

Vulnerability Index

You can search and find all vulnerabilities

Select Category

Search Vulnerability

Tags

stack trace

Related Vulnerabilities

Dead accurate, fast & easy-to-use Web Application Security Scanner

GET A DEMO