795323 - directory listing in http://planet.mozilla.org

Status: NEW

(Websites :: planet.mozilla.org, defect)

Description

[shashank]

Attachment: directory listing

certain directories of http://planet.mozilla.org/ are having directory listing vulnerabilities. The urls of them are 

1. http://planet.mozilla.org/img/  
2. http://planet.mozilla.org/projects/img/

Comment 1

[shashank]

please add an index page in order to fiix directory listing

Comment 2

[Reed Loden [:reed]]

This is not a security vulnerability.

Comment 3

[shashank]

is directory listing not counted in vulnerablities ??? or only critical directory listing ???(In reply to Reed Loden [:reed] from comment #2)
> This is not a security vulnerability.

Comment 4

[Matt Fuller :mfuller]

It depends - it can be a security risk if the directory is critical / contains sensitive files. In this case, it's merely the image folders for the site. Not a big risk.

Comment 5

[shashank]

then plz chek my another bug ... bug id 795639  there is sensitive directory listing 
(In reply to Matt Fuller :mfuller from comment #4)
> It depends - it can be a security risk if the directory is critical /
> contains sensitive files. In this case, it's merely the image folders for
> the site. Not a big risk.

Comment 6

[shashank]

well am i going to get bounty for it ???

Comment 7

[shashank]

replys plzz???????????????????????????????????????????/

Comment 8

[shashank]

what do u mean ??? :/

Comment 9

[Curtis Koenig [:curtisk-use curtis.koenig+bzATgmail.com]]]

(In reply to shashank from comment #8)
> what do u mean ??? :/

Please stop spamming the bug, issues are handled based on the priority of the issue. This issue is a low and as such is not eligible for a bounty. Planet is a blog platform and contains no sensitive information.

The other bug is both a duplicate of an existing issue and a low, and thus also not eligible for a bounty.