Full Path Disclosure
- Risk:
Low
- Type:
- Passive
- CWE:
- CWE-209
- Summary
The full path of files which might be sensitive has been exposed to the client.
- Solution
Disable directory browsing in your web server. Refer to the web server documentation.
U.S. seized $8.2 million in crypto linked to 'Romance Baiting' scams
New Android Trojan Crocodilus Abuses Accessibility to Steal Banking and Crypto Credentials
BlackLock Ransomware Exposed After Researchers Exploit Leak Site Vulnerability
Retail giant Sam’s Club investigates Clop ransomware breach claims
Phishing-as-a-service operation uses DNS-over-HTTPS for evasion
New Ubuntu Linux security bypasses require manual mitigations
Oracle Health breach compromises patient data at US hospitals
Researchers Uncover 46 Critical Flaws in Solar Inverters From Sungrow, Growatt, and SMA
CoffeeLoader Uses GPU-Based Armoury Packer to Evade EDR and Antivirus Detection
CVE-2025-2783 Google Chromium Mojo Sandbox Escape Vulnerability
CVE-2019-9874 Sitecore CMS and Experience Platform (XP) Deserialization Vulnerability
CVE-2019-9875 Sitecore CMS and Experience Platform (XP) Deserialization Vulnerability
CVE-2025-30154 reviewdog/action-setup GitHub Action Embedded Malicious Code Vulnerability
CVE-2025-1316 Edimax IC-7100 IP Camera OS Command Injection Vulnerability
CVE-2024-48248 NAKIVO Backup and Replication Absolute Path Traversal Vulnerability
CVE-2017-12637 SAP NetWeaver Directory Traversal Vulnerability
CVE-2025-24472 Fortinet FortiOS and FortiProxy Authentication Bypass Vulnerability
CVE-2025-30066 tj-actions/changed-files GitHub Action Embedded Malicious Code Vulnerability
CVE-2025-24201 Apple Multiple Products WebKit Out-of-Bounds Write Vulnerability
InformationalContent-Type Header Empty
HighSession Fixation
MediumCRLF Injection
InformationalStorable but Non-Cacheable Content
LowInformation Disclosure - Sensitive Information in Browser sessionStorage
LowServer Leaks Version Information via "Server" HTTP Response Header Field
InformationalRe-examine Cache-control Directives
InformationalContent-Type Header Missing
CWE-1276 Hardware Child Block Incorrectly Connected to Parent System
CWE-470 Use of Externally-Controlled Input to Select Classes or Code ('Unsafe Reflection')
CWE-207 Observable Behavioral Discrepancy With Equivalent Products
HighCWE-644 Improper Neutralization of HTTP Headers for Scripting Syntax
CWE-162 Improper Neutralization of Trailing Special Elements
Free online web security scanner