Description

Due to incorrect configuration, the web application discloses a full path to a file with source code, which generated a response, in the "X-SourceFiles" header.

Remediation

Hide X-SourceFiles header

References

What does the X-SourceFiles header do?

Related Vulnerabilities

Magento Config File Disclosure

WordPress Plugin Simple Download Button Shortcode 'file' Parameter Information Disclosure (1.0)

WordPress Plugin Advanced File Manager Information Disclosure (5.2.4)

Unrestricted access to Apache HugeGraph

WordPress 5.7.x Multiple Vulnerabilities (5.7 - 5.7.7)

Severity

Low

Classification

CWE-200 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N

Tags

Information Disclosure