Bug Password to Elastic Search is shown as plain text in Server Error Log

[Saarbruecken]

Code:

Server error log
    XFES\Elasticsearch\ConnectException: Elasticsearch error: cURL error 28: SSL connection timeout (see https://curl.haxx.se/libcurl/c/libcurl-errors.html) for https://forum:SECRETPASSWORD@internal.domain.tld:9200/forum/_search src/addons/XFES/Elasticsearch/Api.php:447
    Generated by: Unknown account Dec 27, 2024 at 12:07 PM

[HEADING=2]Stack trace[/HEADING]
#0 src/addons/XFES/Elasticsearch/Api.php(393): XFES\Elasticsearch\Api->request('get', 'cl/_search', '{
    "sort": [...')
#1...

Read more

Continue reading...