Flask debug mode

Description

This Flask web application is running in Debug Mode. Even though the interactive debugger does not work in forking environments (which makes it nearly impossible to use on production servers), it still allows the execution of arbitrary code. This makes it a major security risk and therefore it must never be used on production machines.

Remediation

Debug Mode must never be used on production machines. Disable Debug Mode before deploying the application.

References
Severity
Classification
Tags
  • Code Execution