CSS leaks SCSS debug info

Disclosed: 2014-02-28 16:46:22 By guido To security
Unknown
Vulnerability Details
Download CSS style sheet referenced from the HTML and do: grep -oP "file.:.*?scss" application-facbdb64a504bb08ec272860320e1941.css | sort | uniq As you can see it exposes information about the file system, source CSS files and software used. See enclosed file for a dump of the output of the command above.
Actions
View on HackerOne
Report Stats
  • Report ID: 2221
  • State: Closed
  • Substate: resolved
  • Upvotes: 11
Share this report