Directory Browsing
- Risk:
Medium
- Type:
- Passive
- CWE:
- CWE-548
- Summary
It is possible to view a listing of the directory contents. Directory listings may reveal hidden scripts, include files, backup source files, etc., which can be accessed to reveal sensitive information.
- Solution
Configure the web server to disable directory browsing.
- Other info
- Web server identified: Apache 2