CWE-756 Missing Custom Error Page
baseThe product does not return custom error pages to the user, possibly exposing sensitive information.
01
parent weaknesses
Broader classes this is a kind of.
02
child weaknesses
More specific entries beneath this one.
03
vulnerabilities (3)
Known CVEs related to this entry.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2018-8913US | medium6.1 | — | ||
Missing custom error page vulnerability in Synology Web Station before 2.1.3-0139 allows remote attackers to conduct phishing attacks via a crafted URL. | ||||
| CVE-2023-27998US | medium5.3 | — | ||
A lack of custom error pages vulnerability [CWE-756] in FortiPresence versions 1.2.0 through 1.2.1 and all versions of 1.1 and 1.0 may allow an unauthenticated attacker with the ab… | ||||
| CVE-2022-3175US | medium5.3 | — | ||
Missing Custom Error Page in GitHub repository ikus060/rdiffweb prior to 2.4.2. | ||||
04
source
Where this definition is published.
MITREUS
scry
Weaknesses like this turn up in real, exploitable exposures. See what is exposed on your perimeter with a free passive scan.
Free scan