Information disclosure in error messages

this lab is talk about information disclosure in the error msg

this error we can cause it to get the error msg from the server with the version to solve the lab .

we go to the lab and get the request in the burpsuite by click on the view details button

this is the base request as a normal behavior

we can cause an error by the productId parameter to get the version of the server work by add single quote in the end of parameter value

productId = 4'

so we get the error msg

so if we go down in the response part we will get the version

so take it copy and submit it in the home page and the lab will be solved

the server version is : Apache Struts 2 2.3.31

Good Luck