CVE-2018-7251

Name of the Vulnerable Software and Affected Versions Anchor version 0.12.3

Description An issue was discovered in the config/error.php file. The error log is exposed at the "errors.log" URI and contains MySQL credentials if a MySQL error, such as "Too many connections", has occurred.

Recommendations For Anchor version 0.12.3, consider restricting access to the "errors.log" URI to prevent exposure of MySQL credentials. As a temporary workaround, restrict access to the config/error.php file until a patch is available.