Description

The web application is run in development mode. It should be avoided in the production environment and strictly configured in a development environment because it exposes sensitive information about the web application

Remediation

Disable the development mode

References

Use multiple environments in ASP.NET Core

Related Vulnerabilities

WordPress Plugin AI ChatBot Information Disclosure (4.8.9)

Joomla! Core 2.5.x Information Disclosure (2.5.0 - 2.5.9)

[Possible] Internal Path Disclosure (Windows)

WordPress 3.5.1 Multiple Vulnerabilities (2.0 - 3.5.1)

WordPress 4.7 Multiple Vulnerabilities (4.7)

Severity

Medium

Classification

CWE-200 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:N CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:L/SI:N/SA:N

Tags

Information Disclosure Configuration