CVE-2024-43376: Umbraco CMS vulnerable to Generation of Error Message Containing Sensitive Information

The vulnerability stems from the error handling middleware in ApplicationBuilderExtensions.cs. Before the patch, the code directly set ProblemDetails.Detail to exception.StackTrace and Instance to exception.GetType().Name without checking the debug mode status. The commit diff shows the addition of an 'isDebug' check using IHostingEnvironment.IsDebugMode to conditionally include these fields, confirming the absence of this check was the root cause. The AspNetCoreHostingEnvironment.cs changes (caching debug mode) support proper evaluation but were not the primary vulnerability source. The CWE-209 description and advisory both align with this insecure error message generation pattern.