Description

The Introduction of a New Line Character lets the attacker the stack trace at demo.microweber.org/
This Attack becomes more significant because of its Less complication.

The Stack trace discloses following information :

1. Backend Response code.
2. The Versions of Backend Laravel technology.
3. The Routing Path

Proof of Concept

1. Visit the following URL :
   https://demo.microweber.org/demo/api/logout?redirect_to=
2. Now Add the CRLF payload to the parameter. It will look like this :
   https://demo.microweber.org/demo/api/logout?redirect_to=xyz%0d%0axyz

Impact

This vulnerability is capable of disclosing sensitive stack trace exposed by the back-end which will let the attacker escalate his/her attack vector.

I Hope you understand this issue and Fix it as soon as possible.
Thank you.