H3-2022-0053¶

Laravel .env File Exposure

Description¶

The Laravel .env file is exposed.

Impact¶

An unauthenticated attacker can retrieve sensitive information like database, mail, payment API credentials to further compromise services.

References¶

• Laravel .env Files Exposed In Browsers
• Laravel .env Exposed
• MITRE ATT&CK Technique: T1552.001: Unsecured Credentials: Credentials In Files