Description
This Struts web application is configured to use the Config Browser plugin. The Config Browser Plugin is a tool used to view the web application configuration at runtime. This plugin should be used only during development phase and access to it should be strictly restricted in production.
Remediation
The Config Browser plugin can be disabled by removing the .jar file (usually named struts2-config-browser-plugin-*.jar) from /WEB-INF/lib directory.
References
Related Vulnerabilities
WordPress Plugin Fusion Engage Local File Disclosure (1.0.5)
Go web application binary disclosure
WordPress Plugin Video Conferencing with Zoom Information Disclosure (3.8.16)
WordPress Plugin S3Bubble Cloud Video With Adverts & Analytics Arbitrary File Download (0.7)
WordPress Plugin History Collection Arbitrary File Download (1.1.1)