The following URL (usually /.git/config) is publicly accessible and is leaking source code and repository configuration.
Severity: medium
Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a6522726964c5
[core] repositoryformatversion = 0 filemode = true bare = false logallrefupdates = true [remote "origin"] url = git://core.git.wordpress.org/ fetch = +refs/heads/6.0:refs/remotes/origin/6.0 [branch "6.0"] remote = origin merge = refs/heads/6.0
Open service 2a02:26f0:480:36::212:4007:443 · prod-wp.krone.at
2026-01-07 12:15
HTTP/1.1 401 Unauthorized Content-Length: 381 Content-Type: text/html; charset=iso-8859-1 WWW-Authenticate: Basic realm="Admins Only" Date: Wed, 07 Jan 2026 12:15:31 GMT Connection: close Alt-Svc: h3=":443"; ma=93600 KRN-AKA-GROUP: WP Strict-Transport-Security: max-age=600 KRN-GLOBAL: 1 Page title: 401 Unauthorized <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"> <html><head> <title>401 Unauthorized</title> </head><body> <h1>Unauthorized</h1> <p>This server could not verify that you are authorized to access the document requested. Either you supplied the wrong credentials (e.g., bad password), or your browser doesn't understand how to supply the credentials required.</p> </body></html>
Open service 2a02:26f0:480:36::212:401e:80 · prod-wp.krone.at
2026-01-07 12:15
HTTP/1.1 308 Permanent Redirect Location: https://prod-wp.krone.at/ Content-Length: 0 Date: Wed, 07 Jan 2026 12:16:12 GMT Connection: close KRN-AKA-GROUP: WP Strict-Transport-Security: max-age=600 KRN-GLOBAL: 1
Open service 2a02:26f0:480:36::212:4007:80 · prod-wp.krone.at
2026-01-07 12:15
HTTP/1.1 308 Permanent Redirect Location: https://prod-wp.krone.at/ Content-Length: 0 Date: Wed, 07 Jan 2026 12:16:12 GMT Connection: close KRN-AKA-GROUP: WP Strict-Transport-Security: max-age=600 KRN-GLOBAL: 1
Open service 2.16.6.219:443 · prod-wp.krone.at
2026-01-07 12:15
HTTP/1.1 401 Unauthorized Content-Length: 381 Content-Type: text/html; charset=iso-8859-1 WWW-Authenticate: Basic realm="Admins Only" Date: Wed, 07 Jan 2026 12:15:32 GMT Connection: close Alt-Svc: h3=":443"; ma=93600 KRN-AKA-GROUP: WP Strict-Transport-Security: max-age=600 KRN-GLOBAL: 1 Page title: 401 Unauthorized <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"> <html><head> <title>401 Unauthorized</title> </head><body> <h1>Unauthorized</h1> <p>This server could not verify that you are authorized to access the document requested. Either you supplied the wrong credentials (e.g., bad password), or your browser doesn't understand how to supply the credentials required.</p> </body></html>
Open service 2.16.6.204:80 · prod-wp.krone.at
2026-01-07 12:15
HTTP/1.1 308 Permanent Redirect Location: https://prod-wp.krone.at/ Content-Length: 0 Date: Wed, 07 Jan 2026 12:16:13 GMT Connection: close KRN-AKA-GROUP: WP Strict-Transport-Security: max-age=600 KRN-GLOBAL: 1
Open service 2.16.6.219:80 · prod-wp.krone.at
2026-01-07 12:15
HTTP/1.1 308 Permanent Redirect Location: https://prod-wp.krone.at/ Content-Length: 0 Date: Wed, 07 Jan 2026 12:16:13 GMT Connection: close KRN-AKA-GROUP: WP Strict-Transport-Security: max-age=600 KRN-GLOBAL: 1
Open service 2a02:26f0:480:36::212:401e:443 · prod-wp.krone.at
2026-01-07 12:15
HTTP/1.1 401 Unauthorized Content-Length: 381 Content-Type: text/html; charset=iso-8859-1 WWW-Authenticate: Basic realm="Admins Only" Date: Wed, 07 Jan 2026 12:15:31 GMT Connection: close Alt-Svc: h3=":443"; ma=93600 KRN-AKA-GROUP: WP Strict-Transport-Security: max-age=600 KRN-GLOBAL: 1 Page title: 401 Unauthorized <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"> <html><head> <title>401 Unauthorized</title> </head><body> <h1>Unauthorized</h1> <p>This server could not verify that you are authorized to access the document requested. Either you supplied the wrong credentials (e.g., bad password), or your browser doesn't understand how to supply the credentials required.</p> </body></html>
Open service 2.16.6.204:443 · prod-wp.krone.at
2026-01-07 12:15
HTTP/1.1 401 Unauthorized Content-Length: 381 Content-Type: text/html; charset=iso-8859-1 WWW-Authenticate: Basic realm="Admins Only" Date: Wed, 07 Jan 2026 12:15:31 GMT Connection: close Alt-Svc: h3=":443"; ma=93600 KRN-AKA-GROUP: WP Strict-Transport-Security: max-age=600 KRN-GLOBAL: 1 Page title: 401 Unauthorized <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"> <html><head> <title>401 Unauthorized</title> </head><body> <h1>Unauthorized</h1> <p>This server could not verify that you are authorized to access the document requested. Either you supplied the wrong credentials (e.g., bad password), or your browser doesn't understand how to supply the credentials required.</p> </body></html>