Code flaw · Code · first seen 13 Oct · CWE-209
LowLikelyOpenMobilefix by 10 Feb
Open · Mobile's
It's Mobile's, but no one has picked it up.
One problem in one place, found by code.
1 source · 1 place
Code
go/stacktrace-leak · commit d1e8f77 by Adaeze
What closes it
Nobody can mark it fixed by hand. A person submits the fix; a scan or a retest decides it.
37th of 39 in your queue
Proof first, then exploitation in the wild, a public exploit, EPSS and severity, adjusted for exposure and how much the asset matters
Priority
26 / 100
What each source saw
As each source gives it · secrets, keys and card numbers stay masked
The code · tessellate/mobile-api
Open the repositoryinternal/http/errors.go
| 39 | func writeErr(w http.ResponseWriter, err error) { |
| 40 | w.WriteHeader(500) |
| 41 | fmt.Fprintf(w, "%+v", err) |
| 42 | } |
The fix
Log the full error, and send the client a generic message with a request ID.
What happened, and what was said
1 event · 0 comments · oldest first