Description

The web application exposes Delve Debugger port. It's not recommended to have Delve service publicly accessible as the debugger has full access to the Go app and an attacker may be able to execute arbitrary code.

Remediation

Disable Debugger or restrict access to it

References

Delve

Related Vulnerabilities

WordPress 5.1.x Multiple Vulnerabilities (5.1 - 5.1.8)

Possible SQL Statement in comment

Unrestricted access to Haproxy Data Plane API

WordPress 4.4.x Multiple Vulnerabilities (4.4 - 4.4.3)

WordPress Plugin WP e-Commerce Shop Styling Arbitrary File Download (2.5)

Severity

High

Classification

CWE-200 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

Tags

Information Disclosure Configuration