1261
Nature Type ID Name Page
MemberOf 1349 OWASP Top Ten 2021 Category A05:2021 - Security
Misconfiguration
1344 2493
MemberOf 1412 Comprehensive Categorization: Poor Coding Practices 1400 2538
Taxonomy Mappings
Mapped Taxonomy Name Node ID Fit Mapped Node Name
CERT C Secure Coding DCL06-C Use meaningful symbolic constants to
represent literal values in program logic
CWE-548: Exposure of Information Through Directory Listing
Weakness ID : 548
Structure : Simple
Abstraction : Variant
Description
A directory listing is inappropriately exposed, yielding potentially sensitive information to attackers.
Extended Description
A directory listing provides an attacker with the complete index of all the resources located inside
of the directory. The specific risks and consequences vary depending on which files are listed and
accessible.
Relationships
The table(s) below shows the weaknesses and high level categories that are related to this
weakness. These relationships are defined as ChildOf, ParentOf, MemberOr and give insight to
similar items that may exist at higher and lower levels of abstraction. In addition, relationships such
as PeerOf and CanAlsoBe are defined to show similar weaknesses that may want to be explored.
Relevant to the view "Research Concepts" (CWE-1000)
Nature Type ID Name Page
ChildOf 497 Exposure of Sensitive System Information to an
Unauthorized Control Sphere