Endpoint exposes stack trace errors

Cette page n'est pas encore disponible en français, sa traduction est en cours.
Si vous avez des questions ou des retours sur notre projet de traduction actuel, n'hésitez pas à nous contacter.

Description

An API endpoint was found exposing stack trace errors. Stack trace leaks occur when an application displays detailed error messages that include internal code paths, function names, and line numbers when an error occurs.

When stack traces are exposed to users, attackers can gain valuable insights into the application’s architecture, libraries, and potential vulnerabilities that can be exploited in further attacks.

Remediation

  • Implement proper error handling to catch exceptions before they propagate to users
  • Configure production environments to disable detailed error messages

References

ReferenceDescription
OWASP - REST Security Cheat SheetREST Security Cheat Sheet: guidance on the best practices in REST services implementation.