The following URL (usually /.git/config) is publicly accessible and is leaking source code and repository configuration.
Additionally the GIT credentials are present and could give unauthorized access to source code repository of private projects.
Severity: critical
Fingerprint: 2580fa947178c883cda65107b6f0882eb5010f354c5d91ec33bd1e3974ba6046
[fetch] recurseSubmodules = false [core] repositoryformatversion = 0 filemode = true bare = false logallrefupdates = true [remote "origin"] url = https://gitlab-ci-token:FMNcLGjzL2zWEjX53X6R@gitlab.com/myibanwallet/frontend-web/crm.git fetch = +refs/heads/*:refs/remotes/origin/*
Open service 176.34.255.168:80 · api.stag.qmusic.be
2026-01-07 14:40
HTTP/1.1 200 OK Date: Wed, 07 Jan 2026 14:40:39 GMT Content-Length: 0 Connection: close X-UA-Compatible: IE=Edge,chrome=1 X-Request-Id: b52f25cae884c1c36bf724f697ca9bd8 X-Runtime: 0.003734 X-Varnish: 196852 163992 Age: 2 Via: 1.1 varnish-9cd9bb58d-b2jzf (Varnish/7.6) Accept-Ranges: bytes X-Cache: HIT-API X-Cache-Hits: 6
Open service 176.34.255.168:443 · api.stag.qmusic.be
2026-01-07 14:40
HTTP/1.1 200 OK Date: Wed, 07 Jan 2026 14:40:39 GMT Content-Length: 0 Connection: close X-UA-Compatible: IE=Edge,chrome=1 X-Request-Id: b52f25cae884c1c36bf724f697ca9bd8 X-Runtime: 0.003734 X-Varnish: 163994 163992 Age: 2 Via: 1.1 varnish-9cd9bb58d-b2jzf (Varnish/7.6) Accept-Ranges: bytes X-Cache: HIT-API X-Cache-Hits: 4
Open service 176.34.255.168:80 · api.stag.qmusic.nl
2026-01-07 14:40
HTTP/1.1 200 OK Date: Wed, 07 Jan 2026 14:40:39 GMT Content-Length: 0 Connection: close X-UA-Compatible: IE=Edge,chrome=1 X-Request-Id: e610af3b26aa0f605a8e86ff68fb3c9a X-Runtime: 0.003091 X-Varnish: 363157 605049 Age: 2 Via: 1.1 varnish-9cd9bb58d-9jzmw (Varnish/7.6) Accept-Ranges: bytes X-Cache: HIT-API X-Cache-Hits: 5
Open service 176.34.255.168:443 · api.stag.qmusic.nl
2026-01-07 14:40
HTTP/1.1 200 OK Date: Wed, 07 Jan 2026 14:40:38 GMT Content-Length: 0 Connection: close X-UA-Compatible: IE=Edge,chrome=1 X-Request-Id: e610af3b26aa0f605a8e86ff68fb3c9a X-Runtime: 0.003091 X-Varnish: 692062 605049 Age: 2 Via: 1.1 varnish-9cd9bb58d-9jzmw (Varnish/7.6) Accept-Ranges: bytes X-Cache: HIT-API X-Cache-Hits: 3
Open service 176.34.255.168:443 · api.stag.joe.be
2026-01-07 14:33
HTTP/1.1 200 OK Date: Wed, 07 Jan 2026 14:33:19 GMT Content-Length: 0 Connection: close X-UA-Compatible: IE=Edge,chrome=1 X-Request-Id: fa1618003da0994f62f14ff4cd886cbd X-Runtime: 0.003008 X-Varnish: 667610 690161 Age: 3076 Via: 1.1 varnish-9cd9bb58d-9jzmw (Varnish/7.6) Accept-Ranges: bytes X-Cache: HIT-API X-Cache-Hits: 6
Open service 176.34.255.168:80 · api.stag.joe.be
2026-01-07 14:33
HTTP/1.1 200 OK Date: Wed, 07 Jan 2026 14:33:18 GMT Content-Length: 0 Connection: close X-UA-Compatible: IE=Edge,chrome=1 X-Request-Id: 34741bdd25bd695fca431f16f7818444 X-Runtime: 0.003369 X-Varnish: 98851 98845 Age: 2 Via: 1.1 varnish-9cd9bb58d-b2jzf (Varnish/7.6) Accept-Ranges: bytes X-Cache: HIT-API X-Cache-Hits: 4