Description
Directory listing is a web server function that displays the directory contents when there is no index file in a specific website directory. It is dangerous to leave this function turned on for the web server because it leads to information disclosure.
Remediation
You should make sure no sensitive information is disclosed or you may want to restrict directory listings from the web server configuration.
References
Related Vulnerabilities
WordPress Plugin PAYPAL CURRENCY CONVERTER BASIC FOR WOOCOMMERCE Arbitrary File Disclosure (1.3)
Atlassian Jira insecure REST permissions
Access-Control-Allow-Origin header with wildcard (*) value
InfluxDB Unauthorized Access Vulnerability
WordPress Plugin Multi Plugin Installer Arbitrary File Disclosure (1.1.0)