Information Disclosure - Debug Error Messages

The response appeared to contain common error messages returned by platforms such as ASP.NET, and Web-servers such as IIS and Apache. You can configure the list of common debug messages.

Debug error messages expose internal application details such as stack traces, database schema, file paths, and framework versions that assist attackers in reconnaissance. An attacker can use this information to identify specific vulnerabilities in the technology stack, craft targeted exploits, and understand the application’s internal logic. Error messages may also reveal sensitive business logic or configuration details that help map the attack surface.

Disable debugging messages before pushing to production.