Stack Trace Disclosure (ColdFusion)
Severity: Medium
Summary
Netsparker identified a stack trace disclosure (ColdFusion) in the target web server's HTTP response.
Impact
An attacker can obtain information such as:
- Stack trace.
- Physical file path of template file.
- Information about the generated exception.
Remediation
Configure your application not to provide detailed error pages in production environments. Save all information regarding the error to a backend storage, such as a log or a text file, and show a friendly custom error page to the user.
Classifications
PCI v3.1-6.5.5, PCI v3.2-6.5.5, CAPEC-214, WASC-14, OWASP 2013-A5
, CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N/E:H/RL:O/RC:C
Vulnerability Index
You can search and find all vulnerabilities
Select Category
OR
Search Vulnerability
