FPCH Admin Cloaked Posted December 22, 2021 FPCH Admin Posted December 22, 2021 MSRC was informed by Wiz.io, a cloud security vendor, under Coordinated Vulnerability Disclosure (CVD) of an issue where customers can unintentionally configure the .git folder to be created in the content root, which would put them at risk for information disclosure. This, when combined with an application configured to serve static content, makes it possible for others to download files not intended to be public. Quote
Recommended Posts
Join the conversation
You can post now and register later. If you have an account, sign in now to post with your account.