.idea Project Directory

Description

During the scan, Cytrix managed to find the “.idea Project Directory” Vulnerability.
The “.idea” directory contains configuration files (of .XML type), these files may lead the attacker to your database and credentials, it can contain sensitive data such as : the location of your Windows directory, your saved personal settings, and many more.
These files should not exist on the production system.

These files might contain sensitive information which may assist a certain attacker to perform more advanced attacks, harming your web assets in a much greater extent.

Severity/Score

CVSS Version 3.x – 5.3 Medium

Recommendation

Remove these files from any production related systems, or, restrict the access to this folder so that only authorized personal have access to it.

References

https://cytrix.io/blog/blog/information-disclosure-self-revealing-our-secrets/

< Return to all Vulnerabilities

HTTP VS. HTTPS

You must have once wondered what HTTP means and what is the difference between that ugly word to HTTPS, and if not, then please read

Read More »

Crossing Scripts – XSS

Injections. SQL Injections. Cross-site Scripting (hence the amazing title “Crossing Scripts – XSS”). There all sorts of Injection-Based attacks, if you want to read about

Read More »