The following URL (usually /.git/config) is publicly accessible and is leaking source code and repository configuration.
Severity: medium
Fingerprint: 2580fa947e78dd08e645819dbffb10cf73094d707a3ae0a55bbd81ff2b4ae5a0
HTTP/1.1 200 OK Content-Length: 107495 Content-Type: text/html Content-MD5: UDQT1GPEchVeUCjvQKkvrg== Last-Modified: Mon, 07 Feb 2022 06:23:15 GMT Accept-Ranges: bytes ETag: "0x8D9EA025310BF85" X-Cache: TCP_MISS x-ms-request-id: 0f27da02-301e-004c-0875-7f3f5a000000 x-ms-version: 2018-03-28 X-Azure-Ref-OriginShield: 0jTpVZAAAAAAyaBNgreuESolTUuoVgXaERlJBMjMxMDUwNDE3MDI3ADE1YTAwNTViLTFhZjktNGQxZS05ZWQ1LThjZTI5YzFmNmM2YQ== Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Referrer-Policy: no-referrer X-Azure-Ref: 0jjpVZAAAAAD8Bo6SD7pXT78XMe/+BCcyRlJBMzFFREdFMDQxOQAxNWEwMDU1Yi0xYWY5LTRkMWUtOWVkNS04Y2UyOWMxZjZjNmE= Date: Fri, 05 May 2023 17:19:09 GMT Connection: close Page title: Client Lifecycle Management Software | Finomial[core] repositoryformatversion = 0 filemode = false bare = false logallrefupdates = true ignorecase = true [remote "origin"] url = https://finomialcode.visualstudio.com/DefaultCollection/www.finomial.com/_git/FinomialWebsiteStatic fetch = +refs/heads/*:refs/remotes/origin/* [gc] auto = 0
Severity: medium
Fingerprint: 2580fa947e78dd08e645819d1cc87ef2e8ae700cce2d766e3898edca64f8ff02
HTTP/1.1 200 OK Date: Fri, 05 May 2023 17:19:10 GMT Content-Type: text/html Content-Length: 107495 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Last-Modified: Mon, 07 Feb 2022 06:23:15 GMT ETag: "0x8D9EA025310BF85" x-ms-request-id: aaa19b23-a01e-005e-6dc2-7d448a000000 x-ms-version: 2018-03-28 x-azure-ref: 20230505T171910Z-17sgt9gks10zh9yunzwzrusfps00000001eg00000000wr69 X-Cache: TCP_HIT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Referrer-Policy: no-referrer Accept-Ranges: bytes Page title: Client Lifecycle Management Software | Finomial[core] repositoryformatversion = 0 filemode = false bare = false logallrefupdates = true ignorecase = true [remote "origin"] url = https://finomialcode.visualstudio.com/DefaultCollection/www.finomial.com/_git/FinomialWebsiteStatic fetch = +refs/heads/*:refs/remotes/origin/* [gc] auto = 0
Severity: medium
Fingerprint: 2580fa947178c88602b1737db148c044baa2727ab8135b5bbc521bbb99ac2f6c
[core] repositoryformatversion = 0 filemode = false bare = false logallrefupdates = true ignorecase = true [remote "origin"] url = https://finomialcode.visualstudio.com/DefaultCollection/www.finomial.com/_git/FinomialWebsiteStatic fetch = +refs/heads/*:refs/remotes/origin/* [gc] auto = 0