Drupal Backup Migrate directory publicly accessible

Description

The Drupal Backup Migrate directory is publicly accessible from the internet. This directory contains a list of Drupal site backups.

This directory also contains a test file named test.txt with a fixed content this file should not be publicly accessible. The scanner confirmed that it's possible to read the contents of this file from the internet. This indicates there is a very high probability that the Drupal site backup files stored in the same directory are also publicly accessible.

Remediation

Restrict access to the Drupal Backup Migrate directory so it's not publicly accessible from the internet.

References

Related Vulnerabilities

Severity

Classification

Tags