40032—.htaccess Information Leak

PUBLISHEDsecurity alertMedium

Active

Metadata

Alert ID:: 40032
Risk:: Medium
Type:: Active
CWE:: CWE-94Improper Control of Generation of Code ('Code Injection')

Summary

htaccess files can be used to alter the configuration of the Apache Web Server software to enable/disable additional functionality and features that the Apache Web Server software has to offer.

Solution

Ensure the .htaccess file is not accessible.

References

browse all alerts