Directory Browsing

Home/Alerts/Alert detail/

Risk:
Medium

Type:
Passive

CWE:
CWE-548

Summary: It is possible to view a listing of the directory contents. Directory listings may reveal hidden scripts, include files, backup source files, etc., which can be accessed to reveal sensitive information.

Solution: Configure the web server to disable directory browsing.

Other info: Web server identified: Apache 2

References: https://cwe.mitre.org/data/definitions/548.html

Latest Security News

Middle East Cyberwar Rages On, With No End in Sight

AI Could Generate 10,000 Malware Variants, Evading Detection in 88% of Case

Apache fixes remote code execution bypass in Tomcat web server

Microsoft fixes bug behind random Office 365 deactivation errors

Rockstar2FA Collapse Fuels Expansion of FlowerStorm Phishing-as-a-Service

Top 10 Cybersecurity Trends to Expect in 2025

U.S. Judge Rules Against NSO Group in WhatsApp Pegasus Spyware Case

Italy Fines OpenAI €15 Million for ChatGPT GDPR Data Privacy Violations

Top Alert List

MediumAbsence of Anti-CSRF Tokens

Content Security Policy (CSP) Header Not Set

InformationalInformation Disclosure - Suspicious Comments

LowStrict-Transport-Security Multiple Header Entries (Non-compliant with Spec)

LowCookie without SameSite Attribute

CSP

InformationalRe-examine Cache-control Directives

MediumMissing Anti-clickjacking Header

InformationalModern Web Application

LowX-Content-Type-Options Header Missing

Top CVE List

CVE-2024-12356 BeyondTrust Privileged Remote Access (PRA) and Remote Support (RS) Command Injection Vulnerability

CVE-2024-20767 Adobe ColdFusion Improper Access Control Vulnerability

CVE-2019-11001 Reolink Multiple IP Cameras OS Command Injection Vulnerability

CVE-2022-23227 NUUO NVRmini 2 Devices Missing Authentication Vulnerability

CVE-2021-40407 Reolink RLC-410W IP Camera OS Command Injection Vulnerability

CVE-2023-36884 Microsoft Windows Search Remote Code Execution Vulnerability

CVE-2024-35250 Microsoft Windows Kernel-Mode Driver Untrusted Pointer Dereference Vulnerability

CVE-2024-55956 Cleo Multiple Products Unauthenticated File Upload Vulnerability

CVE-2020-5849 Unraid Authentication Bypass Vulnerability

CVE-2024-43451 Microsoft Windows NTLMv2 Hash Disclosure Spoofing Vulnerability

Common CWEs

CWE-1329 Reliance on Component That is Not Updateable

CWE-357 Insufficient UI Warning of Dangerous Operations

CWE-32 Path Traversal: '...' (Triple Dot)

CWE-617 Reachable Assertion

CWE-1041 Use of Redundant Code

CWE-1097 Persistent Storable Data Element without Associated Comparison Control Element

CWE-760 Use of a One-Way Hash with a Predictable Salt

CWE-183 Permissive List of Allowed Inputs

CWE-1336 Improper Neutralization of Special Elements Used in a Template Engine

CWE-1267 Policy Uses Obsolete Encoding

Free security scan for your website

Don't show website scan report rating on the leaderboard