Common Weakness Enumeration
CWE-548 Exposure of Information Through Directory Listing
Description
The product inappropriately exposes a directory listing with an index of all the resources located inside of the directory.
Associated Reviewed Advisories
Vulnerabilities classified under CWE-548 ordered by modification date.
| Advisory ID | NVD ID | Severity | PURLs | Summary | Last Modified |
|---|---|---|---|---|---|
| GHSA-mxw3-3hh2-x2mh | CVE-2026-22860 | HIGH |
Rack has a Directory Traversal via Rack:Directory |
2026-02-24 | |
| GHSA-c5cj-xp43-qcc3 | CVE-2025-62396 | MODERATE | - |
Moodle's error handling leads to sensitive information disclosure |
2025-10-24 |
| GHSA-xh92-rqrq-227v | CVE-2025-61685 | MODERATE |
Mastra Docs MCP Server `@mastra/mcp-docs-server` Leads to Information Exposure |
2025-10-13 | |
| GHSA-v588-qcp3-jv46 | CVE-2019-5415 | HIGH |
Path Traversal in serve |
2025-07-15 | |
| GHSA-cfqx-f43m-vfh7 | - | MODERATE |
@saltcorn/server arbitrary file and directory listing when accessing build mobile app results |
2024-10-03 | |
| GHSA-46hv-7769-j7rx | CVE-2019-5437 | MODERATE |
Unauthorized File Access in harp |
2023-09-07 | |
| GHSA-5f9h-9pjv-v6j7 | CVE-2020-8161 | HIGH |
Directory traversal in Rack::Directory app bundled with Rack |
2022-05-26 | |
| GHSA-45j8-pm75-5v8x | CVE-2018-16493 | HIGH |
Path Traversal in simplehttpserver |
2020-08-31 |