CWE-209 on ZAP

.NET stack trace / YSOD

Mon, 01 Jan 0001 00:00:00 +0000

Detects common framework stack traces, error pages, and path disclosures in observed responses.

Generated by OWASP PTK DAST Module

Full Path Disclosure

Mon, 01 Jan 0001 00:00:00 +0000

The full path of files which might be sensitive has been exposed to the client.

Generic Padding Oracle

Mon, 01 Jan 0001 00:00:00 +0000

By manipulating the padding on an encrypted string, an attacker is able to generate an error message that indicates a likely ‘padding oracle’ vulnerability. Such a vulnerability can affect any application or framework that uses encryption improperly, such as some versions of ASP.net, Java Server Faces, and Mono. An attacker may exploit this issue to decrypt data and recover encryption keys, potentially viewing and modifying confidential data. This rule should detect the MS10-070 padding oracle vulnerability in ASP.net if CustomErrors are enabled for that.

Information Disclosure - Java Stack Trace

Mon, 01 Jan 0001 00:00:00 +0000

A Java stack trace was found in the HTTP response body.

Information Disclosure - SQL Error

Mon, 01 Jan 0001 00:00:00 +0000

An SQL error was found in the HTTP response body.

Internal file path disclosure

Mon, 01 Jan 0001 00:00:00 +0000

Detects common framework stack traces, error pages, and path disclosures in observed responses.

Generated by OWASP PTK DAST Module

Java stack trace

Mon, 01 Jan 0001 00:00:00 +0000

Detects common framework stack traces, error pages, and path disclosures in observed responses.

Generated by OWASP PTK DAST Module

Node.js / Express stack trace

Mon, 01 Jan 0001 00:00:00 +0000

Detects common framework stack traces, error pages, and path disclosures in observed responses.

Generated by OWASP PTK DAST Module

PHP fatal error / warning

Mon, 01 Jan 0001 00:00:00 +0000

Detects common framework stack traces, error pages, and path disclosures in observed responses.

Generated by OWASP PTK DAST Module

Python traceback

Mon, 01 Jan 0001 00:00:00 +0000

Detects common framework stack traces, error pages, and path disclosures in observed responses.

Generated by OWASP PTK DAST Module