Stack Trace Leak

Uncaught exceptions in the application leak full stack traces to the client, revealing underlying technologies such as SQLite, Node.js and the file structure. This information assists attackers in mapping the technology stack and identifying additional vulnerabilities.

• Manipulate a URL or form input to trigger an unhandled error (for example, request an invalid product ID).
• The server responds with an error page containing the full stack trace and file paths.

• Exposure of internal file structure and source code locations.
• Disclosure of backend technologies and versions in use.
• Assistance for attackers in crafting targeted exploits.

• Configure the application to return generic error messages to end users.
• Log detailed error information server‑side for debugging purposes only.
• Implement a global error handler to catch and properly handle exceptions.