..Hi there,
This is Tanzil Khan, *(Security Researcher and Bug Bounty Hunter)*
I have found an instance that is vulnerable to a miss configuration that
discloses the source code of your internal services.
Vulnerable Instance information.
Vulnerable IP: 54.167.144.218:9000
Vulnerable URL: http://54.167.144.218:9000/
Found project:
kbr-app-demo
kbr-bootstrap-portal
kbr-covid19
kbr-devsecops
kbr-edge
kbr-flight
kbr-grafana
kbr-intelligent-ticketing
kbr-machine-learning
kbr-portal-demo
kbr-prognostics
*POC :*
[image: POC.png]
Also, I have attached the source list. As for *POC.*
if you need any information please let me know. hope you guys will fix this
ASAP
let me know when you fix
Best regards
Tanzil
