Stack Trace Disclosure (Django)
Severity: Medium
Summary
Netsparker identified a stack trace disclosure (Django) in the target web server's HTTP response.
Impact
An attacker can obtain information such as:
- Exact Django & Python version.
- Used database type, database user name, current database name.
- Details of the Django project configuration.
- Internal file paths.
- Exception-generated source code, local variables and their values.
Remediation
Apply the following changes on your Django settings file to prevent this problem: set
DEBUG option to False.Classifications
PCI v3.1-6.5.5, PCI v3.2-6.5.5, CAPEC-214, WASC-14, OWASP 2013-A5, OWASP 2017-A6
, CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Vulnerability Index
You can search and find all vulnerabilities
Select Category
OR
Search Vulnerability
