Skip to content

Latest commit

 

History

History
25 lines (20 loc) · 793 Bytes

hidden-file-found.md

File metadata and controls

25 lines (20 loc) · 793 Bytes
name severity cvss-score cvss-vector cwe-id cwe-name compliance
Hidden file found
low
5.3
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
CWE-538
File and Directory Information Exposure
HIPAA ISO 27001 owasp10 PCI v4.0
164.306(a), 164.312(a)(1), 164.312(d)
A.8.4, A.8.9, A.8.15
A1, A5
pci4-6.2.4

We found a file in your application with potentially sensitive content. If attackers find it, they can use it to exploit or facilitate the exploitation of your application.

How to fix

{% tabs hidden-file-found %} {% tab hidden-file-found generic %} If you don’t need this file to run your application, remove it from the server. If you need it, move it to somewhere not accessible to users or set proper access permissions. {% endtab %}

{% endtabs %}