CWE-209
Generation of Error Message Containing Sensitive Information
The product generates an error message that includes sensitive information about its environment, users, or associated data.
Impactr finds and proves whether CWE-209 — or flaws like it — are actually reachable in your own web apps and APIs, with a reproducible exploit as evidence.