cve.bz

CWE-535: Exposure of Information Through Shell Error Message

Filter

A command shell error message indicates that there exists an unhandled exception in the web application code. In many cases, an attacker can leverage the conditions that cause these errors in order to gain unauthorized access to the system.

What the weakness is: CWE-535 at MITRE. All weaknesses

Ask an AI about CWE-535

ChatGPTClaudeGoogle AI Mode

Show the promptExplain CWE-535: Exposure of Information Through Shell Error Message and how to prevent and detect it in code. Use https://cwe.mitre.org/data/definitions/535.html and https://cve.bz/cve/cwe/535?via=ask-ai-copy for recent CVEs with this weakness. Cite the sources.

Opens a third-party assistant; its answer is its own, not cve.bz's. The prompt holds only this weakness's id and public links.

  1. 3.7CVE-2026-35109EPSS 0.2%

    HCL AION is affected by a vulnerability where pages served over HTTPS could be cached by the browser or intermediate proxies. Sensitive information in cached responses may be retrieved by an unauthorized user with access to the cache, pote…

  2. 4.9CVE-2023-1098EPSS 0.9%

    An information disclosure vulnerability has been discovered in GitLab EE/CE affecting all versions starting from 11.5 before 15.8.5, all versions starting from 15.9 before 15.9.4, all versions starting from 15.10 before 15.10.1 will allow …

  3. 3.7CVE-2022-3375EPSS 0.8%

    An issue has been discovered in GitLab affecting all versions starting from 11.10 before 15.8.5, all versions starting from 15.9 before 15.9.4, all versions starting from 15.10 before 15.10.1. It was possible to disclose the branch names w…