Enhancement: exposures/configs/laravel-env.yaml by mp

exposures/configs/laravel-env.yaml

@@ -1,12 +1,18 @@
 id: laravel-env
 
 info:
-  name: Laravel .env file accessible
+  name: Laravel - Sensitive Information Disclosure
   author: pxmme1337,dwisiswant0,geeknik,emenalf,adrianmf
-  severity: critical
-  description: Laravel uses the .env file to store sensitive information like database credentials and tokens. It should not be publicly accessible.
+  severity: high
+  description: A Laravel .env file was discovered, which stores sensitive information like database credentials and tokens. It should not be publicly accessible.
   reference:
     - https://laravel.com/docs/master/configuration#environment-configuration
+    - https://stackoverflow.com/questions/38331397/how-to-protect-env-file-in-laravel
+  classification:
+    cvss-metrics: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:L
+    cvss-score: 8.3
+    cve-id:
+    cwe-id: CWE-522
   tags: config,exposure,laravel
 
 requests:
@@ -45,3 +51,5 @@ requests:
       - type: status
         status:
           - 200
+
+# Enhanced by mp on 2022/05/19