Stack Trace Disclosure (Grails)

Severity: Low
Summary#

Invicti identified a stack trace disclosure (Grails) in the target web server's HTTP response.

Impact#
An attacker can obtain information such as:
  • Stack trace.
  • Information about the generated exception.
This information might help an attacker gain more information and potentially focus on the development of further attacks for the target system.
Remediation#
Configure your application not to provide detailed error pages in production environments. Save all information regarding the error to a backend storage, such as a log or a text file, and show a friendly custom error page to the user.
Invicti

Dead accurate, fast & easy-to-use Web Application Security Scanner

Get a demo