Summary by National Aeronautics and Space Administration (NASA) - Vulnerability Disclosure Program
This is public.
Source Code Disclosure
Disclosed by oversudo- Engagement National Aeronautics and Space Administration (NASA) - Vulnerability Disclosure Program
- Disclosed date 2 months ago
- Priority P5 Bugcrowd's VRT priority rating
- Status Informational This vulnerability is seen as an accepted business risk
Summary by oversudo
A directory listing misconfiguration was identified on a NASA SATCORPS web server that exposed PHP source code files across multiple directories. While classified as informational due to NASA's open source policy, this finding demonstrates common web server misconfigurations.