PHP Debug bar

What is the "PHP Debug bar?"

The "PHP Debug bar" module is designed to detect misconfigurations and vulnerabilities in the PHP Debug Bar software. It has a high severity level, indicating that it can potentially expose sensitive information or lead to security breaches.

Impact

This module can identify any misconfigurations or vulnerabilities present in the PHP Debug Bar software. If left unaddressed, these issues can potentially compromise the security of the application and expose sensitive information to unauthorized individuals.

How the module works?

The "PHP Debug bar" module works by sending an HTTP GET request to the "/_debugbar/open?max=20&offset=0" endpoint. It then applies a series of matching conditions to determine if the response indicates a misconfiguration or vulnerability.

The matching conditions include:

- Checking if the response status is 200 (OK) - Verifying the presence of specific words in the response body, such as "id", "datetime", and "method" - Ensuring that the response header includes the word "application/json"

If all of these conditions are met, the module will report a potential misconfiguration or vulnerability in the PHP Debug Bar software.