What happened?
extractToken() accepts token as query parameter (?token=…) → gets stored into logs, proxies, referrer
McpEndpoint.php:117/122 logs first 20 characters of the token
500-Handler (McpEndpoint.php:186-191) returns $e->getMessage() an den Client (Interna-Disclosure).
Version
6.2
Expected result
No response
Actual result
No response
System Information
No response
Additional Comments
No response
What happened?
extractToken() accepts token as query parameter (?token=…) → gets stored into logs, proxies, referrer
McpEndpoint.php:117/122 logs first 20 characters of the token
500-Handler (McpEndpoint.php:186-191) returns $e->getMessage() an den Client (Interna-Disclosure).
Version
6.2
Expected result
No response
Actual result
No response
System Information
No response
Additional Comments
No response