.env Information Leak
- Risk:
Medium
- Type:
- Active
- CWE:
- 215
- Summary
- One or more .env files seems to have been located on the server. These files often expose infrastructure or administrative account credentials, API or APP keys, or other sensitive configuration information.
- Solution
- Ensure the .env file is not accessible.