MTN Group: Information disclosure due to debug mode enabled at Laravel instance https://mpos.mtn.co.sz/
The Laravel framework contained a vulnerability known as CVE-2021-3129, which allowed remote code execution due to unsafe usage of PHP in the Ignition debug module. This vulnerability was relatively easy to exploit and did not require user authentication, resulting in a high CVSS score of 9.8. Th...