Skip to content

Error_Message_Exposure.md

Latest commit

 

History

History
19 lines (14 loc) · 849 Bytes

Error_Message_Exposure.md

File metadata and controls

19 lines (14 loc) · 849 Bytes

Error Message Exposure

Table of Contents

Sensitive Data in Error Messages

Detailed error messages may expose sensitive information.

  • Database queries exposure

    SQLSTATE[42000]: Syntax error or access violation: 1064 
You have an error in your SQL syntax near 'SELECT * FROM users WHERE id=1\'' at line 1

  • Exposing sensitive information through stack traces

    requests.exceptions.ConnectionError: HTTPConnectionPool(host='invalid_host', port=8080): Max retries exceeded with url: /data?apikey=secret_hardcoded_key&keyword=test (Caused by NameResolutionError("<urllib3.connection.HTTPConnection object at 0x100000000>: Failed to resolve 'invalid_host' ([Errno 8] nodename nor servname provided, or not known)"))