Description

The web application is based on Typo3 CMS. A sensitive file has been found. Access to such files must be restricted, as it may lead to disclosure of sensitive information about the web application.

Remediation

Restrict access to sensitive files

References

Web Server Environment

Related Vulnerabilities

Sensitive Data Exposure

WordPress Plugin All-In-One Security (AIOS)-Security and Firewall Information Disclosure (5.1.2)

WordPress Plugin ACF to REST API Information Disclosure (3.2.0)

WordPress Plugin WooCommerce Arbitrary File Download (3.4.5)

WordPress 4.4.x Multiple Vulnerabilities (4.4 - 4.4.3)

Severity

Low

Classification

CWE-200 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:N CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:L/SI:N/SA:N

Tags

Information Disclosure Test Files