ASP.NET Core Development Mode enabled

Description

The web application is run in development mode. It should be avoided in the production environment and strictly configured in a development environment because it exposes sensitive information about the web application

Remediation

Disable the development mode

References

Use multiple environments in ASP.NET Core

Related Vulnerabilities

Atlassian Jira Manage Filters information disclosure

ColdFusion path disclosures

WordPress Plugin iThemes Security (formerly Better WP Security) Information Disclosure (5.1.1)

WordPress Plugin Cherry Services List Information Disclosure (1.4.1)

WordPress Plugin Google Doc Embedder Arbitrary File Disclosure (2.4.6)

Severity

Medium

Classification

CWE-200 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:N CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:L/SI:N/SA:N