HexBrain

Localize · Report #7923

Apache2 /icons/ folder accessible

Validstatus
4upvotes
18 May 2014disclosed

How it was found

The Apache2 icons folder is accessible from http://www.localize.io/icons/. This is not by definition dangerous, but removing the directory can help obfuscate the server version you're running, which may prevent targeted attacks against your web server.

To remove the directory you should look for Alias "icons" [...] somewhere in the Apache2 config files and comment out the line.

This report was disclosed publicly on HackerOne and belongs to its author and the program. See the original