Threats tagged 'ghsa-3j3f-vrq7-3c85'

OpenPanel versions before 3.0.0 have an information exposure vulnerability where sensitive data such as database connection URLs and email template information are written to standard output logs. This includes database credentials in migration startup logs and password-reset tokens when certain environment variables are unset. Unauthorized users with access to these logs can obtain this sensitive information.