Security Test: File disclosure¶

Description¶

Default Severity: low

File disclosure vulnerabilities occur when a web server unintentionally reveals files that contain sensitive details like configuration settings, credentials, or internal processes. This typically happens because of insecure coding practices—such as not sanitizing user input properly or misconfiguring file access permissions—which allows attackers to manipulate file paths and access files outside the intended directory. If left unaddressed, malicious actors could use this information to better understand your system's weaknesses and plan more targeted exploits, potentially leading to more serious breaches. Developers can often fall into this trap by assuming default configurations are secure or by not fully validating the input that directs file access.

Configuration¶

Identifier: information_disclosure/file_disclosure

Examples¶

All configuration available:

checks:
  information_disclosure/file_disclosure:
    skip: false # default

Compliance and Standards¶