Recently I coincidentally have discovered that an api endpoint of an insurance company is sending a StackTrace of a JSON parser as response to a http
POST message with bad formatted JSON in the content field.
url of the endpoint is indicating that it has the job to save data which is sent by a client. The stacktrace looks like this:
JSON parse error: Unrecognized token 'nul': was expecting 'null', 'true', 'false' or NaN; nested exception is com.fasterxml.jackson.core.JsonParseException: Unrecognized token 'nul': was expecting 'null', 'true', 'false' or NaN\n at [Source: java.io.PushbackInputStream@5f81c2d8; line: 1, column: 10]"
How big of a risk is this?