Mars · Report #2243003
Information Exposure due to enabled debug mode
Validstatus
lowseverity
22upvotes
25 Nov 2024disclosed
Summary
A vulnerability is reported in one of the developing servers belonging to the organization. The server is found to be exposing system information to unauthenticated users on the internet. This exposure is attributed to the enabled debug mode on the server. The disclosed information includes details about the technologies and versions being used in the production system, such as the Python version, Django version, and the database driver in use.
How it was found
The write-up for this report has not been downloaded yet, or the program disclosed it without one. Read it on HackerOne.