Description

The web application exposes Python debugpy/ debugger port. It's not recommended to have the server publicly accessible as the debugger has full access to the Python execution environment and an attacker may be able to execute arbitrary python code.

Remediation

Disable debugger or restrict access to it

References

debugpy - a debugger for Python

Related Vulnerabilities

Moodle Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2015-5340)

Nuxt.js Running in Development Mode

Tracy debugging tool enabled

WordPress Plugin Metform Elementor Contact Form Builder-Flexible and Design-Friendly Contact Form builder for WordPress Information Disclosure (2.1.3)

Jenkins open people list

Severity

High

Classification

CWE-200 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

Tags

Configuration Code Execution