Directory listing is a web server function that displays the directory contents when there is no index file in a specific website…
INCD·CWE-548·Published 2022-07-18
Directory listing is a web server function that displays the directory contents when there is no index file in a specific website directory. A directory listing provides an attacker with the complete index of all the resources located inside of the directory. The specific risks and consequences vary depending on which files are listed and accessible.
Directory listing is a web server function that displays the directory contents when there is no index file in a specific website directory. A directory listing provides an attacker with the complete index of all the resources located inside of the directory. The specific risks and consequences vary depending on which files are listed and accessible.
Directory listing es una función del servidor web que muestra el contenido del directorio cuando no se presenta ningún archivo de índice en un directorio específico del sitio web. Un listado de directorios proporciona a un atacante el índice completo de todos los recursos ubicados dentro del directorio. Los riesgos y las consecuencias específicas varían en función de los archivos listados y accesibles
| Version | Type | Source | Base | Exp | Impact | Vector |
|---|---|---|---|---|---|---|
| 3.1 | Primary | cve.org | 5.7 | — | — | CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L |
| 3.1 | Primary | cve.org | 5.7 | — | — | CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L |
| 3.1 | Primary | NVD | 5.3 | 3.9 | 1.4 | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N |
| 3.1 | Secondary | NVD | 5.7 | 1.5 | 3.7 | CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L |