Description
Directory listing, when enabled, exposes the complete index of resources within a directory to potential attackers. This can lead to unauthorized access to sensitive files and directories, depending on what is listed and accessible.
Recommendation
To mitigate the risk of information disclosure, either create a default index file (e.g., index.html) within directories or disable directory listing in the web server configurations.
References
Could your website be exposed too?
SmartScanner can check your website for Directory Listing and gives you actionable findings to investigate.
Start a free scanRelated Issues
- Directory Listing of Sensitive Files - Vulnerability
- Microsoft IIS Tilde Directory Enumeration - Vulnerability
- PHP Version Disclosure - Vulnerability
- Apache Version Disclosure - Vulnerability
You might also like:
See something that needs correcting? Let us knowUpdated May 13, 2024