The following URL (usually /.git/config) is publicly accessible and is leaking source code and repository configuration.
Additionally the GIT credentials are present and could give unauthorized access to source code repository of private projects.
Severity: critical
Fingerprint: 2580fa947178c88c8f88f4f64b143e4f192660cba91884022e566c815428d22b
[init] defaultBranch = none [fetch] recurseSubmodules = false [core] repositoryformatversion = 0 filemode = true bare = false logallrefupdates = true [remote "origin"] url = https://gitlab-ci-token:jRLKjPXCshmYQ8kWKCV8@git.firstdecision.com.br/first-decision/sharepoint.git fetch = +refs/heads/*:refs/remotes/origin/* [lfs] repositoryformatversion = 0
Open service 20.101.2.157:443 · teamfirst.firstdecision.com.br
2026-01-11 21:04
HTTP/1.1 200 OK
Content-Length: 219
Connection: close
Content-Type: text/html
Date: Sun, 11 Jan 2026 21:05:06 GMT
Cache-Control: public, must-revalidate, max-age=30
ETag: "83428125"
Last-Modified: Fri, 18 Aug 2023 18:59:44 GMT
Strict-Transport-Security: max-age=10886400; includeSubDomains; preload
Referrer-Policy: same-origin
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
X-DNS-Prefetch-Control: off
Page title: Team First
<!DOCTYPE html>
<html>
<head>
<meta charset="utf-8"/>
<title>Team First</title>
<meta http-equiv="refresh" content="0; URL='https://firstdecisioncombr.sharepoint.com/'"/>
</head>
<body>
...
</body>
</html>
Open service 20.101.2.157:443 · teamfirst.firstdecision.com.br
2026-01-10 21:03
HTTP/1.1 200 OK
Content-Length: 219
Connection: close
Content-Type: text/html
Date: Sat, 10 Jan 2026 21:04:44 GMT
Cache-Control: public, must-revalidate, max-age=30
ETag: "83428125"
Last-Modified: Fri, 18 Aug 2023 18:59:44 GMT
Strict-Transport-Security: max-age=10886400; includeSubDomains; preload
Referrer-Policy: same-origin
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
X-DNS-Prefetch-Control: off
Page title: Team First
<!DOCTYPE html>
<html>
<head>
<meta charset="utf-8"/>
<title>Team First</title>
<meta http-equiv="refresh" content="0; URL='https://firstdecisioncombr.sharepoint.com/'"/>
</head>
<body>
...
</body>
</html>
Open service 20.101.2.157:443 · teamfirst.firstdecision.com.br
2026-01-09 21:10
HTTP/1.1 200 OK
Content-Length: 219
Connection: close
Content-Type: text/html
Date: Fri, 09 Jan 2026 21:11:35 GMT
Cache-Control: public, must-revalidate, max-age=30
ETag: "83428125"
Last-Modified: Fri, 18 Aug 2023 18:59:44 GMT
Strict-Transport-Security: max-age=10886400; includeSubDomains; preload
Referrer-Policy: same-origin
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
X-DNS-Prefetch-Control: off
Page title: Team First
<!DOCTYPE html>
<html>
<head>
<meta charset="utf-8"/>
<title>Team First</title>
<meta http-equiv="refresh" content="0; URL='https://firstdecisioncombr.sharepoint.com/'"/>
</head>
<body>
...
</body>
</html>
Open service 20.101.2.157:443 · teamfirst.firstdecision.com.br
2026-01-08 21:15
HTTP/1.1 200 OK
Content-Length: 219
Connection: close
Content-Type: text/html
Date: Thu, 08 Jan 2026 21:16:08 GMT
Cache-Control: public, must-revalidate, max-age=30
ETag: "83428125"
Last-Modified: Fri, 18 Aug 2023 18:59:44 GMT
Strict-Transport-Security: max-age=10886400; includeSubDomains; preload
Referrer-Policy: same-origin
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
X-DNS-Prefetch-Control: off
Page title: Team First
<!DOCTYPE html>
<html>
<head>
<meta charset="utf-8"/>
<title>Team First</title>
<meta http-equiv="refresh" content="0; URL='https://firstdecisioncombr.sharepoint.com/'"/>
</head>
<body>
...
</body>
</html>
Open service 20.101.2.157:443 · teamfirst.firstdecision.com.br
2026-01-07 21:08
HTTP/1.1 200 OK
Content-Length: 219
Connection: close
Content-Type: text/html
Date: Wed, 07 Jan 2026 21:09:25 GMT
Cache-Control: public, must-revalidate, max-age=30
ETag: "83428125"
Last-Modified: Fri, 18 Aug 2023 18:59:44 GMT
Strict-Transport-Security: max-age=10886400; includeSubDomains; preload
Referrer-Policy: same-origin
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
X-DNS-Prefetch-Control: off
Page title: Team First
<!DOCTYPE html>
<html>
<head>
<meta charset="utf-8"/>
<title>Team First</title>
<meta http-equiv="refresh" content="0; URL='https://firstdecisioncombr.sharepoint.com/'"/>
</head>
<body>
...
</body>
</html>
Open service 20.101.2.157:443 · teamfirst.firstdecision.com.br
2026-01-06 21:03
HTTP/1.1 200 OK
Content-Length: 219
Connection: close
Content-Type: text/html
Date: Tue, 06 Jan 2026 21:04:48 GMT
Cache-Control: public, must-revalidate, max-age=30
ETag: "83428125"
Last-Modified: Fri, 18 Aug 2023 18:59:44 GMT
Strict-Transport-Security: max-age=10886400; includeSubDomains; preload
Referrer-Policy: same-origin
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
X-DNS-Prefetch-Control: off
Page title: Team First
<!DOCTYPE html>
<html>
<head>
<meta charset="utf-8"/>
<title>Team First</title>
<meta http-equiv="refresh" content="0; URL='https://firstdecisioncombr.sharepoint.com/'"/>
</head>
<body>
...
</body>
</html>
Open service 20.101.2.157:443 · teamfirst.firstdecision.com.br
2026-01-03 21:15
HTTP/1.1 200 OK
Content-Length: 219
Connection: close
Content-Type: text/html
Date: Sat, 03 Jan 2026 21:15:15 GMT
Cache-Control: public, must-revalidate, max-age=30
ETag: "83428125"
Last-Modified: Fri, 18 Aug 2023 18:59:44 GMT
Strict-Transport-Security: max-age=10886400; includeSubDomains; preload
Referrer-Policy: same-origin
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
X-DNS-Prefetch-Control: off
Page title: Team First
<!DOCTYPE html>
<html>
<head>
<meta charset="utf-8"/>
<title>Team First</title>
<meta http-equiv="refresh" content="0; URL='https://firstdecisioncombr.sharepoint.com/'"/>
</head>
<body>
...
</body>
</html>
Open service 20.101.2.157:443 · teamfirst.firstdecision.com.br
2026-01-02 21:19
HTTP/1.1 200 OK
Content-Length: 219
Connection: close
Content-Type: text/html
Date: Fri, 02 Jan 2026 21:19:00 GMT
Cache-Control: public, must-revalidate, max-age=30
ETag: "83428125"
Last-Modified: Fri, 18 Aug 2023 18:59:44 GMT
Strict-Transport-Security: max-age=10886400; includeSubDomains; preload
Referrer-Policy: same-origin
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
X-DNS-Prefetch-Control: off
Page title: Team First
<!DOCTYPE html>
<html>
<head>
<meta charset="utf-8"/>
<title>Team First</title>
<meta http-equiv="refresh" content="0; URL='https://firstdecisioncombr.sharepoint.com/'"/>
</head>
<body>
...
</body>
</html>
Open service 20.101.2.157:443 · teamfirst.firstdecision.com.br
2026-01-01 21:22
HTTP/1.1 200 OK
Content-Length: 219
Connection: close
Content-Type: text/html
Date: Thu, 01 Jan 2026 21:22:49 GMT
Cache-Control: public, must-revalidate, max-age=30
ETag: "83428125"
Last-Modified: Fri, 18 Aug 2023 18:59:44 GMT
Strict-Transport-Security: max-age=10886400; includeSubDomains; preload
Referrer-Policy: same-origin
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
X-DNS-Prefetch-Control: off
Page title: Team First
<!DOCTYPE html>
<html>
<head>
<meta charset="utf-8"/>
<title>Team First</title>
<meta http-equiv="refresh" content="0; URL='https://firstdecisioncombr.sharepoint.com/'"/>
</head>
<body>
...
</body>
</html>
Open service 20.101.2.157:443 · teamfirst.firstdecision.com.br
2025-12-31 21:24
HTTP/1.1 200 OK
Content-Length: 219
Connection: close
Content-Type: text/html
Date: Wed, 31 Dec 2025 21:24:12 GMT
Cache-Control: public, must-revalidate, max-age=30
ETag: "83428125"
Last-Modified: Fri, 18 Aug 2023 18:59:44 GMT
Strict-Transport-Security: max-age=10886400; includeSubDomains; preload
Referrer-Policy: same-origin
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
X-DNS-Prefetch-Control: off
Page title: Team First
<!DOCTYPE html>
<html>
<head>
<meta charset="utf-8"/>
<title>Team First</title>
<meta http-equiv="refresh" content="0; URL='https://firstdecisioncombr.sharepoint.com/'"/>
</head>
<body>
...
</body>
</html>
Open service 20.101.2.157:443 · teamfirst.firstdecision.com.br
2025-12-30 21:28
HTTP/1.1 200 OK
Content-Length: 219
Connection: close
Content-Type: text/html
Date: Tue, 30 Dec 2025 21:28:08 GMT
Cache-Control: public, must-revalidate, max-age=30
ETag: "83428125"
Last-Modified: Fri, 18 Aug 2023 18:59:44 GMT
Strict-Transport-Security: max-age=10886400; includeSubDomains; preload
Referrer-Policy: same-origin
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
X-DNS-Prefetch-Control: off
Page title: Team First
<!DOCTYPE html>
<html>
<head>
<meta charset="utf-8"/>
<title>Team First</title>
<meta http-equiv="refresh" content="0; URL='https://firstdecisioncombr.sharepoint.com/'"/>
</head>
<body>
...
</body>
</html>
Open service 20.101.2.157:443 · teamfirst.firstdecision.com.br
2025-12-22 09:46
HTTP/1.1 200 OK
Content-Length: 219
Connection: close
Content-Type: text/html
Date: Mon, 22 Dec 2025 09:46:45 GMT
Cache-Control: public, must-revalidate, max-age=30
ETag: "83428125"
Last-Modified: Fri, 18 Aug 2023 18:59:44 GMT
Strict-Transport-Security: max-age=10886400; includeSubDomains; preload
Referrer-Policy: same-origin
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
X-DNS-Prefetch-Control: off
Page title: Team First
<!DOCTYPE html>
<html>
<head>
<meta charset="utf-8"/>
<title>Team First</title>
<meta http-equiv="refresh" content="0; URL='https://firstdecisioncombr.sharepoint.com/'"/>
</head>
<body>
...
</body>
</html>
Open service 20.101.2.157:443 · teamfirst.firstdecision.com.br
2025-12-20 08:25
HTTP/1.1 200 OK
Content-Length: 219
Connection: close
Content-Type: text/html
Date: Sat, 20 Dec 2025 08:25:32 GMT
Cache-Control: public, must-revalidate, max-age=30
ETag: "83428125"
Last-Modified: Fri, 18 Aug 2023 18:59:44 GMT
Strict-Transport-Security: max-age=10886400; includeSubDomains; preload
Referrer-Policy: same-origin
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
X-DNS-Prefetch-Control: off
Page title: Team First
<!DOCTYPE html>
<html>
<head>
<meta charset="utf-8"/>
<title>Team First</title>
<meta http-equiv="refresh" content="0; URL='https://firstdecisioncombr.sharepoint.com/'"/>
</head>
<body>
...
</body>
</html>