New Relic: [docs-ra.newrelic.com] subdomain and Drupal takeover via unconfigured endpoint
Hi, While conducting New Relic web property reconnaissance, I came across the unused docs-ra.newrelic.com endpoint. This endpoint allowed an unauthenticated user to progress through the Drupal installation process and activate the site with their own configuration – it appears that valid MySQL...