vetkit.nginx.listing.autoindex
nginx directory listing is enabled (autoindex on). Every file in the served directory, including backups, dumps or configuration files that were never linked, can be discovered and downloaded.
Last updated:
Suite: Security
regex
nginx directory listing is enabled (autoindex on). Every file in the served directory, including backups, dumps or configuration files that were never linked, can be discovered and downloaded.
Category: SECURITY · Engine rule severity: WARNING
How to fix it
Remove autoindex on (the default is off) and serve an explicit index page or file list instead.
References
Source: packages/engine/rules/sast/config.yml.
Generated from shipped rule definitions at build time. Matching is a review signal, not proof of exploitability. “generic” denotes text matching, not complete language or framework coverage. Runtime configuration and available tools affect whether a rule runs.