CWE-211 - Externally-generated error message containing sensitive information

Description

The application performs an operation that triggers an external diagnostic or error message that is not directly generated or controlled by the application, such as an error generated by the programming language interpreter that the software uses. The error can contain sensitive system information.

Latest vulnerabilities for CWE-211

References

Description of CWE-211 on Mitre website