The following URL (usually /.git/config) is publicly accessible and is leaking source code and repository configuration.
Severity: high
Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a65220e7236aa
[core] repositoryformatversion = 0 filemode = true bare = false logallrefupdates = true longpaths = true [remote "origin"] url = https://uwedev@dev.azure.com/uwedev/Web%20Transformation%20Project/_git/Style fetch = +refs/heads/*:refs/remotes/origin/* [extensions] worktreeConfig = true [gc] auto = 0 [http] version = HTTP/1.1
Severity: high
Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a6522d4d46143
[core] repositoryformatversion = 0 filemode = true bare = false logallrefupdates = true longpaths = true [remote "origin"] url = https://uwedev@dev.azure.com/uwedev/Web%20Transformation%20Project/_git/Style fetch = +refs/heads/*:refs/remotes/origin/* [gc] auto = 0 [http] version = HTTP/1.1
Open service 20.4.244.223:443 · style.uwe.ac.uk
2026-01-09 14:17
HTTP/1.1 200 OK Content-Length: 75 Connection: close Content-Type: text/html Date: Fri, 09 Jan 2026 14:18:13 GMT Cache-Control: public, must-revalidate, max-age=3600 ETag: "86819239" Last-Modified: Fri, 19 Dec 2025 09:42:53 GMT Strict-Transport-Security: max-age=10886400; includeSubDomains; preload Referrer-Policy: same-origin X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block X-DNS-Prefetch-Control: off <p>If you are reading this then you are being served styledev scripts</p>
Open service 20.4.244.223:443 · style.uwe.ac.uk
2026-01-02 18:53
HTTP/1.1 200 OK Content-Length: 75 Connection: close Content-Type: text/html Date: Fri, 02 Jan 2026 18:53:58 GMT Cache-Control: public, must-revalidate, max-age=3600 ETag: "86819239" Last-Modified: Fri, 19 Dec 2025 09:42:53 GMT Strict-Transport-Security: max-age=10886400; includeSubDomains; preload Referrer-Policy: same-origin X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block X-DNS-Prefetch-Control: off <p>If you are reading this then you are being served styledev scripts</p>
Open service 20.4.244.223:443 · style.uwe.ac.uk
2025-12-23 05:35
HTTP/1.1 200 OK Content-Length: 75 Connection: close Content-Type: text/html Date: Tue, 23 Dec 2025 05:35:11 GMT Cache-Control: public, must-revalidate, max-age=3600 ETag: "86819239" Last-Modified: Fri, 19 Dec 2025 09:42:53 GMT Strict-Transport-Security: max-age=10886400; includeSubDomains; preload Referrer-Policy: same-origin X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block X-DNS-Prefetch-Control: off <p>If you are reading this then you are being served styledev scripts</p>
Open service 20.4.244.223:80 · style.uwe.ac.uk
2025-12-20 02:00
HTTP/1.1 301 Moved Permanently Content-Length: 0 Connection: close Date: Sat, 20 Dec 2025 02:00:51 GMT Location: https://style.uwe.ac.uk/
Open service 20.4.244.223:443 · style.uwe.ac.uk
2025-12-20 02:00
HTTP/1.1 200 OK Content-Length: 75 Connection: close Content-Type: text/html Date: Sat, 20 Dec 2025 02:00:51 GMT Cache-Control: public, must-revalidate, max-age=3600 ETag: "86819239" Last-Modified: Fri, 19 Dec 2025 09:42:53 GMT Strict-Transport-Security: max-age=10886400; includeSubDomains; preload Referrer-Policy: same-origin X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block X-DNS-Prefetch-Control: off <p>If you are reading this then you are being served styledev scripts</p>
Open service 20.4.244.223:443 · style.uwe.ac.uk
2025-12-19 05:27
HTTP/1.1 200 OK Content-Length: 75 Connection: close Content-Type: text/html Date: Fri, 19 Dec 2025 05:27:17 GMT Cache-Control: public, must-revalidate, max-age=3600 ETag: "45135788" Last-Modified: Thu, 27 Nov 2025 13:03:05 GMT Strict-Transport-Security: max-age=10886400; includeSubDomains; preload Referrer-Policy: same-origin X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block X-DNS-Prefetch-Control: off <p>If you are reading this then you are being served styledev scripts</p>