Directory Browsing
- Risk:
Medium
- Type:
- Passive
- CWE:
- 548
- Summary
- It is possible to view a listing of the directory contents. Directory listings may reveal hidden scripts, include files, backup source files, etc., which can be accessed to reveal sensitive information.
- Solution
- Configure the web server to disable directory browsing.
- Other info
- Web server identified: Apache 2