Insertion of Sensitive Information into Log File (CWE-532)CVSS 8.2€940
Exposed .env File Leading to Full Email Account Takeover
An exposed .env file on the company’s website publicly revealed sensitive credentials, including SMTP, database, AWS, and Stripe keys. This allowed full access to the admin email account, potential misuse of customer orders, voucher codes, and financial data.
The Discovery
While reviewing certification prices on the company's website via a mobile device, I conducted a basic security test by appending /.env to the URL:
https://company.com/.env
The file was accessible.