Laravel Debug Enabled

Published on 10 Jan 2022
Vulnerability

Description

Laravel Debug mode is enabled with APP_DEBUG set to True An attacker can obtain information such as:

  • Application key

  • Database connection strings

This information might help an attacker to gain more information and exploit further attacks to the target system.

Recommendation

  • Change .env file to disable debug mode:

    APP_DEBUG=false

Anandhu K A
Written by
Lead Engineer

With a profound understanding of product development, Anandhu plays a pivotal role in crafting cutting-edge solutions that cater to the evolving security needs of digital applications. His expertise, deeply rooted in both engineering and security, makes him an essential component of Beagle Security's mission

Experience the Beagle Security platform
Unlock one full penetration test and all Advanced plan features free for 14 days
4.8 on G2 • ISO 27001 certified
See How Beagle Security Works
No credit card • No setup required
Launch interactive demo