Skip to content
vetkitChecksChangelogDocumentation

vetkit.apache.listing.indexes

Apache directory listing is enabled (Options Indexes). Files in the directory that are not linked anywhere, such as backups or configuration files, can be listed and downloaded.

Last updated:

Suite: Security

regex

Apache directory listing is enabled (Options Indexes). Files in the directory that are not linked anywhere, such as backups or configuration files, can be listed and downloaded.

Category: SECURITY · Engine rule severity: WARNING

How to fix it

Use Options -Indexes (or omit Indexes) for every served directory.

References

Source: packages/engine/rules/sast/config.yml.

Generated from shipped rule definitions at build time. Matching is a review signal, not proof of exploitability. “generic” denotes text matching, not complete language or framework coverage. Runtime configuration and available tools affect whether a rule runs.