Merge pull request #1263 from dietervds/edit-some-laravel-templates

Edits to two Laravel related templates

exposures/configs/laravel-env.yaml

@@ -1,9 +1,11 @@
 id: laravel-env
 
 info:
-  name: Laravel .env file
+  name: Laravel .env file accessible
   author: pxmme1337 & dwisiswant0 & geeknik & emenalf
-  severity: medium
+  severity: critical
+  description: Laravel uses the .env file to store sensitive information like database credentials and tokens. It should not be publicly accessible.
+  reference: https://laravel.com/docs/master/configuration#environment-configuration
   tags: config,exposure
 
 requests:

exposures/logs/laravel-log-file.yaml

@@ -3,7 +3,9 @@ id: laravel-log-file
 info:
   name: Laravel log file publicly accessible
   author: sheikhrishad & geeknik
-  severity: low
+  severity: high
+  description: The log file of this Laravel web app might reveal details on the inner workings of the app, possibly even tokens, credentials or personal information.
+  reference: https://laravel.com/docs/master/logging
   tags: laravel,log,exposure
 
 requests: