HexBrain

Mars · Report #2243003

Information Exposure due to enabled debug mode

Validstatus
lowseverity
22upvotes
25 Nov 2024disclosed

Summary

A vulnerability is reported in one of the developing servers belonging to the organization. The server is found to be exposing system information to unauthenticated users on the internet. This exposure is attributed to the enabled debug mode on the server. The disclosed information includes details about the technologies and versions being used in the production system, such as the Python version, Django version, and the database driver in use.

How it was found

The write-up for this report has not been downloaded yet, or the program disclosed it without one. Read it on HackerOne.

This report was disclosed publicly on HackerOne and belongs to its author and the program. See the original