Description

Directory listing is a web server function that displays the directory contents when there is no index file in a specific website directory. It is dangerous to leave this function turned on for the web server because it leads to information disclosure.

Remediation

You should make sure no sensitive information is disclosed or you may want to restrict directory listings from the web server configuration.

References

Related Vulnerabilities