CWE-11 (ASP.NET误配置：创建Debug模式二进制) — Vulnerability Class 2

CWE-11 represents a configuration weakness where ASP.NET applications are deployed with debug binaries enabled in production environments. This misconfiguration exposes detailed internal system information, including stack traces, source code snippets, and variable states, which attackers exploit to map application architecture and identify specific vulnerabilities. By analyzing these verbose error messages, adversaries can plan targeted attacks such as SQL injection or remote code execution with greater precision. To prevent this risk, developers must ensure that the compilation mode is set to release rather than debug before deployment. Additionally, automated CI/CD pipelines should enforce strict configuration checks to guarantee that debug symbols and verbose logging are disabled in live environments, ensuring that sensitive operational data remains hidden from potential malicious actors.