Symfony Profiler information leakage

By
Anandhu Krishnan
Published on
20 Dec 2021
Vulnerability

Description

Symfony app in debug mode exposing PHPinfo page and profiler logs with credentials.App expose data that should remain hidden from the public view, to make troubleshooting easier for developers.

Mitigation measures

Never run in debug mode for production environment also update the Application.


Written by
Anandhu Krishnan
Anandhu Krishnan
Lead Engineer
Experience the Beagle Security platform
Unlock one full penetration test and all Advanced plan features free for 10 days