Description

The web application is run in development mode. It should be avoided in the production environment and strictly configured in a development environment because it exposes sensitive information about the web application

Remediation

Disable the development mode

References

Use multiple environments in ASP.NET Core

Related Vulnerabilities

WordPress Plugin AI ChatBot Information Disclosure (4.8.9)

Possible virtual host found

Ruby on Rails Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2009-3086)

WordPress 6.1.x Multiple Vulnerabilities (6.1 - 6.1.3)

WordPress Plugin Save Contact Form 7 Information Disclosure (2.0)

Severity

Medium

Classification

CWE-200 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:N CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:L/SI:N/SA:N

Tags

Information Disclosure Configuration