The following URL (usually /.git/config
) is publicly accessible and is leaking source code and repository configuration.
Severity: medium
Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a6522037f5201
[core] repositoryformatversion = 0 filemode = true bare = false logallrefupdates = true [remote "origin"] url = https://gitlab.com/mrashidcit/orecto-back-end-laravel.git fetch = +refs/heads/*:refs/remotes/origin/* [branch "master"] remote = origin merge = refs/heads/master
Severity: medium
Fingerprint: 2580fa947e78dd08e645819d1eba3531852e024a58f9c27fa66a1913b67fabbe
HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Cache-Control: no-cache, private Date: Sat, 06 May 2023 05:58:06 GMT Set-Cookie: XSRF-TOKEN=Xqh0wqUB5VttNdIhtxv4PV4UkAOHFRX6ZcuvQvzV; expires=Sat, 06-May-2023 07:58:06 GMT; Max-Age=7200; path=/ Set-Cookie: orecto_session=NDQeT3ppcng9KsH49QEgFGWmal8HHhoYOGxEFzOe; expires=Sat, 06-May-2023 07:58:06 GMT; Max-Age=7200; path=/; httponly Page title: Orecto.pk | Online Shopping for Popular Electronics, Fashion, Home & Garden, Toys & Sports, Automobiles and More products[core] repositoryformatversion = 0 filemode = true bare = false logallrefupdates = true [remote "origin"] url = https://gitlab.com/mrashidcit/orecto-back-end-laravel.git fetch = +refs/heads/*:refs/remotes/origin/* [branch "master"] remote = origin merge = refs/heads/master