GIT Detected

Disclosed: 2017-04-20 09:58:38 By lulliii To nextcloud
Unknown
Vulnerability Details
Hello team, While i was testing nextcloud.com, I've detected GIT repository files. GIT repository files can disclose GIT repository usernames and file lists. While disclosures of this type do not provide direct attack vectors, they can be useful for an attacker when combined with other vulnerabilities discovered within the application. URL: https://nextcloud.com/wp-content/themes/next/.git/config Page is showing: [core] repositoryformatversion = 0 filemode = true bare = false logallrefupdates = true [remote "origin"] url = https://github.com/nextcloud/nextcloud.com.git fetch = +refs/heads/*:refs/remotes/origin/* [branch "master"] remote = origin merge = refs/heads/master [branch "pricing"] remote = origin merge = refs/heads/pricing [branch "orderform"] remote = origin merge = refs/heads/orderform
Actions
View on HackerOne
Report Stats
  • Report ID: 221298
  • State: Closed
  • Substate: resolved
  • Upvotes: 8
Share this report