Description

The web application uses Whoops component to show information about errors. Such errors may disclosure of sensitive information about the web application.

Remediation

Don't show details of errors to users

References

whoops

Related Vulnerabilities

WordPress Plugin WP REST API (WP API) Information Disclosure (1.2)

WordPress Plugin ShareYourCart Information Disclosure (1.6.1)

WordPress Plugin Image Export Arbitrary File Download (1.1.0)

WordPress 4.7.x Multiple Vulnerabilities (4.7 - 4.7.19)

WordPress Plugin Email Subscribers by Icegram Express-Email Marketing, Newsletters, Automation for WordPress & WooCommerce Information Disclosure (3.4.7)

Severity

Low

Classification

CWE-200 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:N CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:L/SI:N/SA:N

Tags

Information Disclosure