Multiple choice technology security

The occurrence of which among the below in the http response will appscan report as possible server path disclosure vulnerability?

  1. ../../help/images/about.jpeg

  2. <!-- /help/images/about.jpeg -->

  3. d:/etc/host/pwd

  4. document.title(“/admin/administration”);
Reveal answer Fill a bubble to check yourself
C Correct answer
Explanation

Server path disclosure occurs when server-side file paths are exposed in responses. Option C (d:/etc/host/pwd) reveals an actual Windows server file path structure. Options A and B show relative paths or HTML comments, while D shows JavaScript code - none expose actual server filesystem paths.

AI explanation

A string like d:/etc/host/pwd reveals an actual server-side filesystem path (drive letter and directory structure), which is a hallmark of a server path disclosure vulnerability — it tells an attacker about the underlying OS and directory layout. The other options are just relative URLs, an HTML comment, or client-side JS, none of which expose the server's real filesystem structure.

Keep practicing — related questions