Apache 2.4.52
tcp/443
The following URL (usually /.git/config) is publicly accessible and is leaking source code and repository configuration.
Severity: medium
Fingerprint: 2580fa947178c88602b1737db148c044baa2727ab8135b5bbc521bbb52e61fd6
[core] repositoryformatversion = 0 filemode = false bare = false logallrefupdates = true [remote "origin"] url = https://github.com/pkp/ojs fetch = +refs/heads/*:refs/remotes/origin/* [branch "main"] remote = origin merge = refs/heads/main [branch "cfs_stable-3_2_1"] remote = origin merge = refs/heads/stable-3_2_1 [submodule "docs/manual"] active = true url = https://github.com/pkp/ojs-user-guide [submodule "lib/pkp"] active = true url = https://github.com/pkp/pkp-lib.git [submodule "lib/ui-library"] active = true url = https://github.com/pkp/ui-library [submodule "plugins/blocks/browse"] active = true url = https://github.com/pkp/browse [submodule "plugins/blocks/makeSubmission"] active = true url = https://github.com/pkp/makeSubmission.git [submodule "plugins/generic/citationStyleLanguage"] active = true url = https://github.com/pkp/citationStyleLanguage.git [submodule "plugins/generic/customBlockManager"] active = true url = https://github.com/pkp/customBlockManager.git [submodule "plugins/generic/googleAnalytics"] active = true url = https://github.com/pkp/googleAnalytics.git [submodule "plugins/generic/googleScholar"] active = true url = https://github.com/pkp/googleScholar [submodule "plugins/generic/lensGalley"] active = true url = https://github.com/asmecher/lensGalley [submodule "plugins/generic/orcidProfile"] active = true url = https://github.com/pkp/orcidProfile.git [submodule "plugins/generic/pdfJsViewer"] active = true url = https://github.com/pkp/pdfJsViewer.git [submodule "plugins/generic/staticPages"] active = true url = https://github.com/pkp/staticPages.git [submodule "plugins/generic/tinymce"] active = true url = https://github.com/pkp/tinymce.git [submodule "plugins/generic/usageStats"] active = true url = https://github.com/pkp/usageStats.git [submodule "plugins/reports/counter/classes/COUNTER"] active = true url = https://github.com/ulsdevteam/COUNTER.git [submodule "plugins/reports/reviewReport"] active = true url = https://github.com/pkp/reviewReport [remote "cjds"] url = https://git.uwaterloo.ca/library/ojs/ojs-cjds.git fetch = +refs/heads/*:refs/remotes/cjds/*
The following URL (usually /.git/config) is publicly accessible and is leaking source code and repository configuration.
Severity: medium
Fingerprint: 2580fa947178c88602b1737db148c044baa2727ab8135b5bbc521bbb52e61fd6
[core] repositoryformatversion = 0 filemode = false bare = false logallrefupdates = true [remote "origin"] url = https://github.com/pkp/ojs fetch = +refs/heads/*:refs/remotes/origin/* [branch "main"] remote = origin merge = refs/heads/main [branch "cfs_stable-3_2_1"] remote = origin merge = refs/heads/stable-3_2_1 [submodule "docs/manual"] active = true url = https://github.com/pkp/ojs-user-guide [submodule "lib/pkp"] active = true url = https://github.com/pkp/pkp-lib.git [submodule "lib/ui-library"] active = true url = https://github.com/pkp/ui-library [submodule "plugins/blocks/browse"] active = true url = https://github.com/pkp/browse [submodule "plugins/blocks/makeSubmission"] active = true url = https://github.com/pkp/makeSubmission.git [submodule "plugins/generic/citationStyleLanguage"] active = true url = https://github.com/pkp/citationStyleLanguage.git [submodule "plugins/generic/customBlockManager"] active = true url = https://github.com/pkp/customBlockManager.git [submodule "plugins/generic/googleAnalytics"] active = true url = https://github.com/pkp/googleAnalytics.git [submodule "plugins/generic/googleScholar"] active = true url = https://github.com/pkp/googleScholar [submodule "plugins/generic/lensGalley"] active = true url = https://github.com/asmecher/lensGalley [submodule "plugins/generic/orcidProfile"] active = true url = https://github.com/pkp/orcidProfile.git [submodule "plugins/generic/pdfJsViewer"] active = true url = https://github.com/pkp/pdfJsViewer.git [submodule "plugins/generic/staticPages"] active = true url = https://github.com/pkp/staticPages.git [submodule "plugins/generic/tinymce"] active = true url = https://github.com/pkp/tinymce.git [submodule "plugins/generic/usageStats"] active = true url = https://github.com/pkp/usageStats.git [submodule "plugins/reports/counter/classes/COUNTER"] active = true url = https://github.com/ulsdevteam/COUNTER.git [submodule "plugins/reports/reviewReport"] active = true url = https://github.com/pkp/reviewReport [remote "cjds"] url = https://git.uwaterloo.ca/library/ojs/ojs-cjds.git fetch = +refs/heads/*:refs/remotes/cjds/*
Open service 129.97.193.45:443
2026-01-26 15:19
HTTP/1.1 400 Bad Request Date: Mon, 26 Jan 2026 15:19:44 GMT Server: Apache/2.4.52 (Ubuntu) Set-Cookie: CFSOJSSID=94lhn7li0l1jth9aaa342hag65; path=/; domain=129.97.193.45; secure; HttpOnly; SameSite=Lax Connection: close Transfer-Encoding: chunked Content-Type: text/html; charset=UTF-8 <h1>400 Bad Request</h1>