BugCrowd Bug Bounty Disclosure: P5 - Directory Listing Vulnerability - Vinit06

Directory Listing Vulnerability

Researcher: Vinit06

Engagement: National Aeronautics and Space Administration (NASA) – Vulnerability Disclosure Program

Disclosed at: 2025-09-16T19:51:05Z

Priority: P5

Status: Informational

Summary

Directory is supposed to be public and visible to the world, to help with contributor development as well as mirror sites around the world.

Activity Feed

Actor	Details	Timestamp (UTC)
Vinit06	Vinit06 sent a: message	2025-10-05T05:17:51Z
Martin_NASA	Martin_NASA published	2025-09-16T19:51:05Z
Vinit06	Vinit06 requested	2025-09-13T08:49:28Z
Vinit06	Vinit06 sent a: message	2025-08-21T12:48:30Z
Vinit06	Vinit06 sent a: message	2025-08-04T12:20:11Z
teapot_bugcrowd	teapot_bugcrowd changed the state to to informational	2025-07-25T15:01:52Z
teapot_bugcrowd	teapot_bugcrowd sent a: message	2025-07-25T15:01:51Z
Vinit06	Vinit06 created the submission	2025-07-25T13:39:30Z

Support Our Work

A considerable amount of time and effort goes into maintaining this website, creating backend automation and creating new features and content for you to make actionable intelligence decisions. Everyone that supports the site helps enable new functionality.

If you like the site, please support us on Patreon or Buy Me A Coffee using the buttons below.

AI APIs OSINT driven New features

Buy Me A Coffee Patreon

Tags: bug bounty, BugCrowd, OSINT

BugCrowd Bug Bounty Disclosure: P5 – Directory Listing Vulnerability – Vinit06

Directory Listing Vulnerability

Summary

Activity Feed

Support Our Work

BugCrowd Bug Bounty Disclosure: P4 – Sensitive NASA Jira & Employee Data Exposure via Public JSFiddle –

BugCrowd Bug Bounty Disclosure: P4 – Publicly editable Google Slides linked from nasa.gov enables unauthorized content modification (content integrity & brand abuse risk – Epenetus-Matias-Putra

BugCrowd Bug Bounty Disclosure: P4 – open redirect vulnerability occurring at https://keycloak.shared-services.staging.appdat.jsc.nasa.gov/ – uko3211

BugCrowd Bug Bounty Disclosure: P5 – internal IP Disclosure via Public DNS Record (blue.guest.hq.nasa.gov) – Theekshana_kusal