Description
Sensitive Unreferenced Resource Found refers to the discovery of sensitive resources within a web application that are not directly linked or referenced within the application itself. These resources, although not part of the main navigation or visible to users, may still be accessible to attackers, providing them with insights into potential attack vectors.
Recommendation
To mitigate the risk of information disclosure, promptly remove or restrict access to sensitive unreferenced resources. Relying solely on resource obscurity for security is inadequate; instead, ensure that sensitive resources are adequately protected through access controls and other security measures.
References
Could your website be exposed too?
SmartScanner can check your website for Sensitive Unreferenced Resource Found and gives you actionable findings to investigate.
Start a free scanRelated Issues
- Unreferenced Resource Found - Vulnerability
- Sensitive Old/Backup Resource Found - Vulnerability
- Unreferenced Login Page Found - Vulnerability
- Unreferenced Repository Found - Vulnerability
