Stack Trace Disclosure (Laravel)
Severity:
Medium
Summary
While analyzing an HTTP response, Invicti identified a stack trace that was exposed by the Laravel framework due to a misconfiguration.
Impact
An attacker can obtain information such as:
- Function names
- Filenames
- Physical file paths of relevant files.
- Function parameters
This information might help an attacker gain more information and potentially focus on the development of further attacks against the target system.
Remediation
Change your config/app.php file to disable debug mode, which is responsible for the visible stack traces:
'debug' => (bool) env('APP_DEBUG', false)
Required Skills for Successful Exploitation
Actions To Take
Vulnerability Index
You can search and find all vulnerabilities
Select Category
Select Vulnerability
Thank you! Your submission has been received!
Oops! Something went wrong while submitting the form.
Select Vulnerability
Featured resources
Build your resistance to threats. And save hundreds of hours each month.
