Full Path Disclosure

Risk:
Low

Type:
Passive

CWE:
209

Summary: The full path of files which might be sensitive has been exposed to the client.

Solution: Disable directory browsing in your web server. Refer to the web server documentation.

References: https://owasp.org/www-community/attacks/Full_Path_Disclosure