Common Weakness Enumeration
CWE-1295 Debug Messages Revealing Unnecessary Information
Description
The product fails to adequately prevent the revealing of unnecessary and potentially sensitive system information within debugging messages.
Associated Reviewed Advisories
Vulnerabilities classified under CWE-1295 ordered by modification date.
| Advisory ID | NVD ID | Severity | PURLs | Summary | Last Modified |
|---|---|---|---|---|---|
| GHSA-f65r-h4g3-3h9h | CVE-2026-48797 | CRITICAL |
Backpropagate: backprop ui --auth and backprop ui --share do not enforce authentication |
2026-06-26 | |
| GHSA-46c3-5xc5-wwhv | CVE-2024-45784 | HIGH |
Apache Airflow: Sensitive configuration values are not masked in the logs by default |
2025-01-21 | |
| GHSA-ppm5-jv84-2xg2 | CVE-2024-38516 | HIGH | - |
Aimeos HTML client may potentially reveal sensitive information in error log |
2024-06-25 |
| GHSA-ch48-9r3q-pv7x | CVE-2023-25500 | LOW |
Vaadin vulnerable to possible information disclosure of class and method names in RPC response |
2023-06-22 | |
| GHSA-qrg9-f472-qwfm | CVE-2021-31412 | MODERATE |
Possible route enumeration in production mode via RouteNotFoundError view in Vaadin 10, 11-14, and 15-19 |
2021-06-24 |