Description

The web application is run in development mode. It should be avoided in the production environment and strictly configured in a development environment because it exposes sensitive information about the web application

Remediation

Disable the development mode

References

Use multiple environments in ASP.NET Core

Related Vulnerabilities

phpMyAdmin Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2016-5730)

Jira Unauthorized User Enumeration via UserPickerBrowser

JBoss Server MBean

Joomla! Core 1.5.x Information Disclosure (1.5.0 - 1.5.14)

Unrestricted access to Caddy API interface

Severity

Medium

Classification

CWE-200 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:N CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:L/SI:N/SA:N

Tags

Information Disclosure Configuration