0—Directory Browsing

PUBLISHEDsecurity alertMedium

Active

Metadata

Alert ID:: 0
Risk:: Medium
Type:: Active
CWE:: CWE-548Exposure of Information Through Directory Listing

摘要

It is possible to view the directory listing. Directory listing may reveal hidden scripts, include files, backup source files, etc. which can be accessed to read sensitive information.

解决方案

Disable directory browsing. If this is required, make sure the listed files does not induce risks.

参考

browse all alerts