Description
During the scan, Kayran managed to find a Possible server path disclosure (Windows) vulnerability.
Full Path Disclosure (FPD) vulnerabilities allows the attacker to get the path that leads to the webroot/file.
The risks of such types of attacks can yield several results. For example, if the webroot is getting leaked, attackers may abuse this knowledge and use it in combination with other vulnerabilities.
Information Disclosure occurs when a website unintentionally reveals sensitive information to its users.
Information disclosure can occur in various cases. For example, Sensitive information resources or messages that are unintentionally being displayed to unauthorized users. Therefore, the Possible server path disclosure takes place.
Recommendation
To prevent this vulnerability, make sure that the server displays a generic, simple message and does not reveal any sensitive information about the server.
References
https://owasp.org/www-community/attacks/Full_Path_Disclosure
