Weakness (CWE)
CWE-210: Self-generated Error Message Containing Sensitive Information
Base Draft
The product identifies an error condition and creates its own diagnostic or error messages that contain sensitive information.
How to prevent it (2 mitigations)
-
Implementation, Build and Compilation
Debugging information should not make its way into a production release.
-
Implementation, Build and Compilation
Debugging information should not make its way into a production release.
Source: MITRE CWE-210
1 result · Clear filters · Feed
-
Low 3.7
CKAN MCP Server: Information disclosure via verbose error reflection
CKAN MCP Server is a tool for querying CKAN open data portals. Prior to 0.4.112, error paths reflect raw upstream response bodies and internal exception messages back to the caller instead of a sanitized, generic message. When the server is pointed at (or red…