H3-2022-0039¶
Golang pprof Debugging Endpoint Enabled
| Category | SECURITY_MISCONFIGURATION |
| Base Score | 4.5 |
Description¶
Golang’s net/http/pprof package can expose sensitive debugging information if enabled in a production environment.
Impact¶
Sensitive environment information may be leaked to attackers allowing for further exploitation.