Pagekit Docker Image Exposes .htaccess File #6
Description
Hi, first of all - great work with the repo.
Pagekit Docker Image Exposes .htaccess File
Description
The community Pagekit Docker image (pagekit/pagekit on Docker Hub) allows public access to the .htaccess file located in the web root.
This file contains configuration rules for Apache and should not be exposed, as it can reveal sensitive application details and URL rewrites.
The exposure is due to a missing Apache configuration directive to deny access to hidden files (e.g., <Files ".ht*"> Require all denied ).
Proof of Concept
Screenshot
Details
-
Affected Docker image:
pagekit/pagekit -
Affected Docker image - link: https://hub.docker.com/r/pagekit/pagekit
CWE:
- CWE-200: Exposure of Sensitive Information to an Unauthorized Actor
- CWE-284: Improper Access Control
- CWE-285: Improper Authorization
References
- https://github.com/izuolan/dockerfiles/tree/master/pagekit
- https://www.acunetix.com/vulnerabilities/web/htaccess-file-detected/
- https://www.invicti.com/web-vulnerability-scanner/vulnerabilities/htaccess-file-detected
Best regards,