CWE-211
Externally-Generated Error Message Containing Sensitive Information
The product performs an operation that triggers an external diagnostic or error message that is not directly generated or controlled by the product, such as an error generated by the programming language interpreter that a software application uses. The error can contain sensitive system information.
Impactr finds and proves whether CWE-211 — or flaws like it — are actually reachable in your own web apps and APIs, with a reproducible exploit as evidence.