{"action":"closed","issue":{"url":"https://api.github.com/repos/snipe/snipe-it/issues/2291","repository_url":"https://api.github.com/repos/snipe/snipe-it","labels_url":"https://api.github.com/repos/snipe/snipe-it/issues/2291/labels{/name}","comments_url":"https://api.github.com/repos/snipe/snipe-it/issues/2291/comments","events_url":"https://api.github.com/repos/snipe/snipe-it/issues/2291/events","html_url":"https://github.com/snipe/snipe-it/issues/2291","id":166769709,"number":2291,"title":"Viewing asset causes exception leading to full path disclosure","user":{"login":"0x27","id":9094330,"avatar_url":"https://avatars.githubusercontent.com/u/9094330?v=3","gravatar_id":"","url":"https://api.github.com/users/0x27","html_url":"https://github.com/0x27","followers_url":"https://api.github.com/users/0x27/followers","following_url":"https://api.github.com/users/0x27/following{/other_user}","gists_url":"https://api.github.com/users/0x27/gists{/gist_id}","starred_url":"https://api.github.com/users/0x27/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/0x27/subscriptions","organizations_url":"https://api.github.com/users/0x27/orgs","repos_url":"https://api.github.com/users/0x27/repos","events_url":"https://api.github.com/users/0x27/events{/privacy}","received_events_url":"https://api.github.com/users/0x27/received_events","type":"User","site_admin":false},"labels":[],"state":"closed","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":1,"created_at":"2016-07-21T08:58:27Z","updated_at":"2016-07-22T04:27:12Z","closed_at":"2016-07-22T04:27:12Z","body":"Found this while clicking around the demo site (https://demo.snipeitapp.com/) to get a feel for the software.\r\n\r\n#### Expected Behavior\r\n\r\nClick on asset (URL: https://demo.snipeitapp.com/hardware/1223/view) to view asset.  \r\nExpect to view asset information.\r\n\r\n-----\r\n\r\n#### Actual Behavior\r\n\r\nLaravel exception occurs, leading to full-path disclosure and a nice stack trace, as per screenshot below.\r\n\r\n![snipeit-fpdbug](https://cloud.githubusercontent.com/assets/9094330/17016912/27ac8fb4-4f29-11e6-8b04-0fae26f26bad.png)\r\n\r\n-----\r\n\r\nUnsure if bug is only affecting the demo instance or not, still need to set up a local instance to test at some point in the near future. This seems to affect all of the assets I clicked on in the demo site so far.  \r\nI don't think this should happen if debug mode is disabled, honestly unfamiliar with the Laravel framework, but it appears debug is enabled on the demo.  \r\nApologies if raising it in public is out of line (due to the somewhat-security-relevance). "}}
{"actor":{"display_login":"snipe"}}