Dropcontact · Report #963542
Django DEBUG mode enabled and leaked system information.
Validstatus
highseverity
12upvotes
21 Aug 2020disclosed
Summary
We were leaking / showing system information.
Django DEBUG mode was enabled and showing some information on some errors.I just follow the errors and finally got some sensitive system information such as configuation ,API keys ,Database users ,System Directories,etc..
How it was found
The write-up for this report has not been downloaded yet, or the program disclosed it without one. Read it on HackerOne.