CWE-537
Java Runtime Error Message Containing Sensitive Information
In many cases, an attacker can leverage the conditions that cause unhandled exception errors in order to gain unauthorized access to the system.
Impactr finds and proves whether CWE-537 — or flaws like it — are actually reachable in your own web apps and APIs, with a reproducible exploit as evidence.