Information disclosure, or information leakage, occurs when an app unintentionally exposes sensitive information to its users. Depending on the context, app may inadvertently disclose various types of information to adversaries, such as:

• Data concerning other users, like usernames or financial information
• Sensitive commercial or business data
• Technical details about the app and its infrastructure

Remediation

• Disable any debugging endpoint (e.g. GraphQL Introspect)
• Only return generic error messages