CWE-1295
Debug Messages Revealing Unnecessary Information
The product fails to adequately prevent the revealing of unnecessary and potentially sensitive system information within debugging messages.
Impactr finds and proves whether CWE-1295 — or flaws like it — are actually reachable in your own web apps and APIs, with a reproducible exploit as evidence.