The following URL (usually /.git/config) is publicly accessible and is leaking source code and repository configuration.
Severity: high
Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a65221849e6e0
[core] repositoryformatversion = 0 filemode = true bare = false logallrefupdates = true [remote "origin"] url = https://discoveryk12@bitbucket.org/discoveryk12/discoveryk12.git fetch = +refs/heads/*:refs/remotes/origin/* [branch "master"] remote = origin merge = refs/heads/master [branch "plugin_sidebare"] remote = origin merge = refs/heads/plugin_sidebare [branch "plugin_all"] remote = origin merge = refs/heads/plugin_all [branch "loginLive"] remote = origin merge = refs/heads/loginLive [branch "fixedBranch"] remote = origin merge = refs/heads/fixedBranch [branch "pluginSidebar"] remote = origin merge = refs/heads/pluginSidebar [branch "updPlugin"] remote = origin merge = refs/heads/updPlugin
Severity: high
Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a652234932af8
[core] repositoryformatversion = 0 filemode = true bare = false logallrefupdates = true [remote "origin"] url = https://discoveryk12@bitbucket.org/discoveryk12/discoveryk12.git fetch = +refs/heads/*:refs/remotes/origin/* [branch "master"] remote = origin merge = refs/heads/master [branch "plugin_sidebare"] remote = origin merge = refs/heads/plugin_sidebare [branch "plugin_all"] remote = origin merge = refs/heads/plugin_all [branch "loginLive"] remote = origin merge = refs/heads/loginLive [branch "fixedBranch"] remote = origin merge = refs/heads/fixedBranch
Severity: high
Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a6522c0360e3f
[core] repositoryformatversion = 0 filemode = true bare = false logallrefupdates = true [remote "origin"] url = https://discoveryk12@bitbucket.org/discoveryk12/discoveryk12.git fetch = +refs/heads/*:refs/remotes/origin/* [branch "master"] remote = origin merge = refs/heads/master [branch "plugin_sidebare"] remote = origin merge = refs/heads/plugin_sidebare [branch "plugin_all"] remote = origin merge = refs/heads/plugin_all [branch "loginLive"] remote = origin merge = refs/heads/loginLive
Severity: high
Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a6522382b9e30
[core] repositoryformatversion = 0 filemode = true bare = false logallrefupdates = true [remote "origin"] url = https://discoveryk12@bitbucket.org/discoveryk12/discoveryk12.git fetch = +refs/heads/*:refs/remotes/origin/* [branch "master"] remote = origin merge = refs/heads/master [branch "plugin_sidebare"] remote = origin merge = refs/heads/plugin_sidebare [branch "plugin_all"] remote = origin merge = refs/heads/plugin_all
Open service 92.123.104.161:443 · lactaid.com
2026-01-06 10:42
HTTP/1.1 403 Forbidden Mime-Version: 1.0 Content-Type: text/html Content-Length: 359 Expires: Tue, 06 Jan 2026 10:42:44 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Tue, 06 Jan 2026 10:42:44 GMT Connection: close Alt-Svc: h3=":443"; ma=93600 Akamai-GRN: 0.0c284317.1767696164.10db53c2 Page title: Access Denied <HTML><HEAD> <TITLE>Access Denied</TITLE> </HEAD><BODY> <H1>Access Denied</H1> You don't have permission to access "http://lactaid.com/" on this server.<P> Reference #18.c284317.1767696164.10db53c2 <P>https://errors.edgesuite.net/18.c284317.1767696164.10db53c2</P> </BODY> </HTML>
Open service 92.123.104.161:80 · lactaid.com
2026-01-06 10:42
HTTP/1.1 403 Forbidden Mime-Version: 1.0 Content-Type: text/html Content-Length: 359 Expires: Tue, 06 Jan 2026 10:43:25 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Tue, 06 Jan 2026 10:43:25 GMT Connection: close Akamai-GRN: 0.21284317.1767696205.6988f5c Page title: Access Denied <HTML><HEAD> <TITLE>Access Denied</TITLE> </HEAD><BODY> <H1>Access Denied</H1> You don't have permission to access "http://lactaid.com/" on this server.<P> Reference #18.21284317.1767696205.6988f5c <P>https://errors.edgesuite.net/18.21284317.1767696205.6988f5c</P> </BODY> </HTML>