Source Code Disclosure - Git

• Risk:

• High

• Type:
• Active

• CWE:
• CWE-541

Summary

The source code for the current page was disclosed by the web server.

Solution

Ensure that Git metadata files are not deployed to the web server or application server

Other info

Example disclosed data.

References

https://owasp.org/www-community/attacks/Forced_browsing

https://cwe.mitre.org/data/definitions/425.html

Free online web security scanner