40034—.env Information Leak

PUBLISHEDsecurity alertMedium

Active

Metadata

Alert ID:: 40034
Risk:: Medium
Type:: Active
CWE:: CWE-215Insertion of Sensitive Information Into Debugging Code

摘要

One or more .env files seems to have been located on the server. These files often expose infrastructure or administrative account credentials, API or APP keys, or other sensitive configuration information.

解决方案

Ensure the .env file is not accessible.

参考

browse all alerts