CWE-756: Missing Custom Error Page

Filter

The product does not return custom error pages to the user, possibly exposing sensitive information.

What the weakness is: CWE-756 at MITRE. OWASP Top 10: A10:2025 Mishandling of Exceptional Conditions

Ask an AI about CWE-756

Show the prompt

Explain CWE-756: Missing Custom Error Page and how to prevent and detect it in code. Use https://cwe.mitre.org/data/definitions/756.html and https://cve.bz/cve/cwe/756?via=ask-ai-copy for recent CVEs with this weakness. Cite the sources.

Opens a third-party assistant; its answer is its own, not cve.bz's. The prompt holds only this weakness's id and public links.

5.3CVE-2023-27998EPSS 0.5%2023-09-13
A lack of custom error pages vulnerability [CWE-756] in FortiPresence versions 1.2.0 through 1.2.1 and all versions of 1.1 and 1.0 may allow an unauthenticated attacker with the ability to navigate to the login GUI to gain sensitive inform…
5.3CVE-2022-3175EPSS 0.9%2022-09-13
Missing Custom Error Page in GitHub repository ikus060/rdiffweb prior to 2.4.2.
6.1CVE-2018-8913EPSS 1.1%2019-04-01
Missing custom error page vulnerability in Synology Web Station before 2.1.3-0139 allows remote attackers to conduct phishing attacks via a crafted URL.