The application has Symfony profiling enabled.
It enables an attacker to access the following sensitive content :
Fingerprint: 407cf4363b0e62fafca67e0756355afd56355afd56355afd56355afd56355afd
Symfony profiler enabled: https://extranet.andcdg.org/_profiler/empty/search/results