Full Path Disclousure on https://airship.paragonie.com

Disclosed: 2017-05-07 01:41:36 By ruisilva To paragonie
Low
Vulnerability Details
Hi , i found an full path disclousure vulnerability on https://airship.paragonie.com For reproduce this vulnerability go to: https://airship.paragonie.com/my/cabins You will see something like this : Class '\ParagonIE\Airship\Cabins' not found #0 /var/www/paragonie/framework/Router.php(236): ParagonIE\Tuner\Router::passArgs(Array, Array, Array) #1 /var/www/paragonie/framework/Router.php(150): ParagonIE\Tuner\Router::serve(Array, Array, Array) #2 /var/www/paragonie/framework/Router.php(107): ParagonIE\Tuner\Router::site(Array) #3 /var/www/paragonie/public_html/index.php(26): ParagonIE\Tuner\Router::route(Array) #4 {main} See attached file Thanks
Actions
View on HackerOne
Report Stats
  • Report ID: 226514
  • State: Closed
  • Substate: informative
  • Upvotes: 2
Share this report