Description
Arbitrary Source Code Disclosure is a vulnerability that occurs when it’s possible to access the source code of any file on a web application, potentially revealing sensitive information such as credentials, API keys, or proprietary algorithms. This can occur due to misconfigurations or vulnerabilities in the web server or application.
Recommendation
To mitigate Arbitrary Source Code Disclosure, avoid passing user-submitted input to filesystem APIs. If it’s not possible, another solution is to use a white list of acceptable inputs.
References
Could your website be exposed too?
SmartScanner can check your website for Arbitrary Source Code Disclosure and gives you actionable findings to investigate.
Start a free scanRelated Issues
- Source Code Disclosure - Vulnerability
- Unreferenced Source Code Disclosure - Vulnerability
- Unix Path Disclosure - Vulnerability
- Tomcat Version Disclosure - Vulnerability
You might also like:
See something that needs correcting? Let us knowUpdated May 13, 2024