than others (see CWE for more precise sub-categories), and
when an error message includes a full path, that is usually
categorized as an information leak, although it might be
resultant from a separate primary vulnerability.