Vulnerability library
Security checkMay 13, 2024

Werkzeug Interactive Debugging is Active

Understand the exposure, see the recommended fix, and check whether your own website has related weaknesses.

Medium severityInformation DisclosureError HandlingFlask

Check your website

Find this and other vulnerabilities with a free scan.

Your scan runs on your computer. No account required.

Description

Werkzeug is a comprehensive WSGI web application library for the Python language. Werkzeug provides a WSGI middleware that renders nice tracebacks, optionally with an interactive debug console to execute code in any frame. This console functionality can be abused by attackers to run commands on the server.

Test for Werkzeug Interactive Debugging Vulnerability with SmartScanner

Donwload FREE!

Recommendation

Do not use the DebuggedApplication on the production servers. And, make sure to pass False as the use_debugger value in the run_simple() function call. If you’re using Flask, set the FLASK_ENV to production in the environment variables.

References

Could your website be exposed too?

SmartScanner can check your website for Werkzeug Interactive Debugging is Active and gives you actionable findings to investigate.

Start a free scan

Related Issues

You might also like:

Why you should use passive vulnerability scan on your website

Secure Coding 101: How to Read and Write Files Securely

These 7 PHP mistakes leave your website open to the hackers

See something that needs correcting? Let us knowUpdated May 13, 2024