Description
The web application exposes Delve Debugger port. It's not recommended to have Delve service publicly accessible as the debugger has full access to the Go app and an attacker may be able to execute arbitrary code.
Remediation
Disable Debugger or restrict access to it
References
Related Vulnerabilities
PostgreSQL Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2015-5288)
Drupal Backup Migrate directory publicly accessible
Squid Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2019-12529)
WordPress Plugin Acumbamail Information Disclosure (1.0.4)
WordPress Plugin Gallery-Flagallery Photo Portfolio Information Disclosure (4.24)