The following URL (usually /.git/config) is publicly accessible and is leaking source code and repository configuration.
Severity: medium
Fingerprint: 2580fa947178c88602b1737db148c044baa2727ab8135b5bbc521bbb3ad39a5a
[core] repositoryformatversion = 0 filemode = false bare = false logallrefupdates = true ignorecase = true [remote "origin"] url = https://github.com/azureappserviceoss/wordpress-azure fetch = +refs/heads/*:refs/remotes/origin/* [branch "master"] remote = origin merge = refs/heads/master [branch "linux-appservice"] remote = origin merge = refs/heads/linux-appservice
The following URL (usually /.git/config) is publicly accessible and is leaking source code and repository configuration.
Severity: medium
Fingerprint: 2580fa947178c88602b1737db148c044baa2727ab8135b5bbc521bbb3ad39a5a
[core] repositoryformatversion = 0 filemode = false bare = false logallrefupdates = true ignorecase = true [remote "origin"] url = https://github.com/azureappserviceoss/wordpress-azure fetch = +refs/heads/*:refs/remotes/origin/* [branch "master"] remote = origin merge = refs/heads/master [branch "linux-appservice"] remote = origin merge = refs/heads/linux-appservice
Open service 13.107.219.45:443 · www.engagemarketing.app
2026-01-23 14:53
HTTP/1.1 200 OK Date: Fri, 23 Jan 2026 14:53:16 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Cache-Control: no-store, no-cache, must-revalidate Expires: Thu, 19 Nov 1981 08:52:00 GMT Pragma: no-cache Set-Cookie: PHPSESSID=1f31982c2d2e4fd44e40859d0a9a5ac4; path=/ X-Powered-By: PHP/7.2.13 Link: <https://engagemarketing-app.azurewebsites.net/wp-json/>; rel="https://api.w.org/" Link: <https://engagemarketing-app.azurewebsites.net/wp-json/wp/v2/pages/126>; rel="alternate"; type="application/json" Link: <https://engagemarketing-app.azurewebsites.net/>; rel=shortlink Fastcgi-Cache: HIT X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff x-azure-ref: 20260123T145316Z-178cb7944b4tt5lbhC1BN17kcn00000002vg00000000enfd X-Cache: CONFIG_NOCACHE
Open service 13.107.213.45:443 · www.engagemarketing.app
2026-01-23 14:53
HTTP/1.1 200 OK Date: Fri, 23 Jan 2026 14:53:16 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Cache-Control: no-store, no-cache, must-revalidate Expires: Thu, 19 Nov 1981 08:52:00 GMT Pragma: no-cache Set-Cookie: PHPSESSID=1f31982c2d2e4fd44e40859d0a9a5ac4; path=/ X-Powered-By: PHP/7.2.13 Link: <https://engagemarketing-app.azurewebsites.net/wp-json/>; rel="https://api.w.org/" Link: <https://engagemarketing-app.azurewebsites.net/wp-json/wp/v2/pages/126>; rel="alternate"; type="application/json" Link: <https://engagemarketing-app.azurewebsites.net/>; rel=shortlink Fastcgi-Cache: HIT X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff x-azure-ref: 20260123T145316Z-r1cf444f6d64hhdthC1BY1xfew0000000kg0000000008ea9 X-Cache: CONFIG_NOCACHE
Open service 13.107.246.38:443 · engagemarketing.app
2026-01-23 14:51
HTTP/1.1 200 OK Date: Fri, 23 Jan 2026 14:51:57 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Cache-Control: no-store, no-cache, must-revalidate Expires: Thu, 19 Nov 1981 08:52:00 GMT Pragma: no-cache Set-Cookie: PHPSESSID=1f31982c2d2e4fd44e40859d0a9a5ac4; path=/ X-Powered-By: PHP/7.2.13 Link: <https://engagemarketing-app.azurewebsites.net/wp-json/>; rel="https://api.w.org/" Link: <https://engagemarketing-app.azurewebsites.net/wp-json/wp/v2/pages/126>; rel="alternate"; type="application/json" Link: <https://engagemarketing-app.azurewebsites.net/>; rel=shortlink Fastcgi-Cache: HIT X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff x-azure-ref: 20260123T145156Z-16f45f5c75bdf6h8hC1BY11gg800000006y000000000m1sh X-Cache: CONFIG_NOCACHE