Description

This detector identifies when the X-ChromeLogger-Data HTTP header is present in server responses, which can lead to sensitive debugging information exposure. The X-ChromeLogger-Data header is used by debugging tools to transmit server-side logs and data to browser developer tools, potentially exposing sensitive application internals, database queries, file paths, and other confidential information to unauthorized users.

Detection Strategy

• The vulnerability is detected when any HTTP response contains the X-ChromeLogger-Data header

• No specific header value analysis is performed - any presence of this header triggers a vulnerability report

• This applies to all HTTP responses from the target web application during scanning