Unreferenced Source Code Disclosure

Description

Unreferenced Source Code Disclosure is a vulnerability that occurs when a backup file or source code file of an application is accessible to users, potentially revealing sensitive information such as credentials, API keys, or proprietary algorithms. This exposure can happen due to misconfigurations or vulnerabilities in the web server or application.

Recommendation

To mitigate Unreferenced Source Code Disclosure, remove the file or limit access to it.

References

• OWASP: Source Code Disclosure
• CWE-200
• CWE-540
• CAPEC-118
• OWASP 2021-A5

Related Issues

• Arbitrary Source Code Disclosure - Vulnerability
• Source Code Disclosure - Vulnerability
• Apache Version Disclosure - Vulnerability
• ASP.NET Version Disclosure - Vulnerability

Tags:

Information Disclosure

Access Control