A city API gateway exposes verbose error messages with stack traces during recon. How should that be framed?
Select an answer to reveal the explanation.
Short Explanation
Stack traces in API errors are the app thinking out loud in public. Paths, versions, and logic clues spill out for anyone who can trigger them. That is disclosure — log it even without a shell.
Full Explanation
Verbose error messages and stack traces commonly reveal framework details, file paths, query structure, or dependency versions. During web information gathering those disclosures help attackers refine follow-on attacks and constitute reportable weaknesses. Shell access is not a prerequisite for documenting information disclosure. The issue is firmly in the web recon and application security domain.