Security Misconfiguration - Debug Mode Enabled

Vulnerability Details

Severity:

Medium

Category:

web

Description

The application is running with debug mode enabled in production, exposing sensitive information and potentially dangerous functionality.

Risks

Debug information could reveal application internals, file paths, database queries, and configuration details that aid further attacks.

Remediation

Disable debug mode in production environments. Implement proper error handling that does not expose internal details. Review and harden all configuration settings before deployment.