疑似 0-day
symfony.lock was found accessible, exposing a full list of installed Composer packages, library versions, and metadata for a Symfony-based PHP application. Disclosure of this file can provide insight into the application's attack surface, potentially revealing vulnerable or outdated dependencies and aiding an attacker in choosing their exploit strategy.
id: symfony-lock-exposure
info:
name: Symfony Lock File - Exposure
author: ritikchaddha
sever
...