Description
This Django web application is running with debug mode turned on (DEBUG = True ). One of the main features of debug mode is the display of detailed error pages. If your app raises an exception when DEBUG is True, Django will display a detailed traceback, including a lot of metadata about your environment, such as all the currently defined Django settings (from settings.py).
Remediation
Never deploy a site into production with DEBUG turned on. To disable debug mode, set DEBUG = False in your Django settings file.
References
Related Vulnerabilities
WordPress Plugin Be POPIA Compliant Information Disclosure (1.1.5)
SAP weak/predictable user credentials
TYPO3 Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2011-4900)
[Possible] Internal Path Disclosure (*nix)
TYPO3 Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2005-4875)