Looking for the vulnerability index of Invicti's legacy products?
Composer installed.json publicly accessible - Vulnerability Database

Composer installed.json publicly accessible

Description

A installed.json file was discovered. Composer is a tool for dependency management in PHP. It allows you to declare the libraries your project depends on and it will manage (install/update) them for you. After installing the dependencies, Composer stores the list of them in a special file for internal purposes.

As the file is publicly accessible, it leads to disclosure of information about components used by the web application.

Remediation

Restrict access to vendors directory