@zerothreatai/vulnerability-registry 3.0.0 → 4.0.0

package/src/categories/sensitive-paths.ts

@@ -18,6 +18,7 @@ export const SENSITIVE_PATH_VULNERABILITIES: Record<string, VulnerabilityDefinit
         title: 'AWS Credentials Exposed',
         description: 'AWS credentials file (.aws/credentials) is publicly accessible containing AWS Access Key ID and Secret Access Key, enabling complete access to AWS services including S3 buckets, EC2 instances, RDS databases, and all cloud resources associated with the compromised account.',
         severity: 'critical',
+        levelId: 1,
         category: 'information_disclosure',
         scanner: 'sensitive-path-scout',
         cvss: {
@@ -41,6 +42,7 @@ export const SENSITIVE_PATH_VULNERABILITIES: Record<string, VulnerabilityDefinit
         title: 'SSH Private Key Exposed',
         description: 'SSH private key file (id_rsa, id_ed25519) is publicly accessible, allowing attackers to authenticate to any system where the corresponding public key is authorized, potentially including production servers, databases, and version control systems.',
         severity: 'critical',
+        levelId: 1,
         category: 'information_disclosure',
         scanner: 'sensitive-path-scout',
         cvss: {
@@ -63,6 +65,7 @@ export const SENSITIVE_PATH_VULNERABILITIES: Record<string, VulnerabilityDefinit
         title: 'SSL/TLS Private Key Exposed',
         description: 'SSL/TLS private key file is publicly accessible, enabling attackers to decrypt all HTTPS traffic, perform man-in-the-middle attacks, and impersonate the server for phishing or credential theft operations against legitimate users.',
         severity: 'critical',
+        levelId: 1,
         category: 'cryptographic',
         scanner: 'sensitive-path-scout',
         cvss: {
@@ -85,6 +88,7 @@ export const SENSITIVE_PATH_VULNERABILITIES: Record<string, VulnerabilityDefinit
         title: 'Rails Master Key Exposed',
         description: 'Rails master.key file is publicly accessible, allowing decryption of all Rails encrypted credentials including database passwords, API keys, and session secrets, enabling complete application compromise and access to all encrypted secrets.',
         severity: 'critical',
+        levelId: 1,
         category: 'information_disclosure',
         scanner: 'sensitive-path-scout',
         cvss: {
@@ -107,6 +111,7 @@ export const SENSITIVE_PATH_VULNERABILITIES: Record<string, VulnerabilityDefinit
         title: 'Terraform State File Exposed',
         description: 'Terraform state file (tfstate) is publicly accessible containing complete infrastructure configuration, resource IDs, IP addresses, and potentially sensitive outputs including database passwords and API keys stored in plain text.',
         severity: 'critical',
+        levelId: 1,
         category: 'information_disclosure',
         scanner: 'sensitive-path-scout',
         cvss: {
@@ -129,6 +134,7 @@ export const SENSITIVE_PATH_VULNERABILITIES: Record<string, VulnerabilityDefinit
         title: 'Kubernetes Config Exposed',
         description: 'Kubernetes kubeconfig file is publicly accessible containing cluster credentials, certificates, and tokens that allow full administrative access to Kubernetes clusters including ability to deploy, modify, and delete all workloads.',
         severity: 'critical',
+        levelId: 1,
         category: 'information_disclosure',
         scanner: 'sensitive-path-scout',
         cvss: {
@@ -151,6 +157,7 @@ export const SENSITIVE_PATH_VULNERABILITIES: Record<string, VulnerabilityDefinit
         title: 'HashiCorp Vault Secret Exposed',
         description: 'HashiCorp Vault secrets or root token exposed, providing access to the centralized secrets management system and all secrets stored within, potentially compromising hundreds of application credentials and encryption keys.',
         severity: 'critical',
+        levelId: 1,
         category: 'information_disclosure',
         scanner: 'sensitive-path-scout',
         cvss: {
@@ -176,6 +183,7 @@ export const SENSITIVE_PATH_VULNERABILITIES: Record<string, VulnerabilityDefinit
         title: 'Git Repository Exposed',
         description: 'Git repository metadata (.git/HEAD, .git/config) is publicly accessible, allowing attackers to download the complete repository including all source code, commit history, configuration files, and potentially credentials committed accidentally.',
         severity: 'high',
+        levelId: 2,
         category: 'information_disclosure',
         scanner: 'sensitive-path-scout',
         cvss: {
@@ -198,6 +206,7 @@ export const SENSITIVE_PATH_VULNERABILITIES: Record<string, VulnerabilityDefinit
         title: 'Environment File Exposed',
         description: 'Environment configuration file (.env, .env.local, .env.production) is publicly accessible containing application secrets, database credentials, API keys, and other sensitive configuration that should never be exposed to end users.',
         severity: 'high',
+        levelId: 2,
         category: 'information_disclosure',
         scanner: 'sensitive-path-scout',
         cvss: {
@@ -220,6 +229,7 @@ export const SENSITIVE_PATH_VULNERABILITIES: Record<string, VulnerabilityDefinit
         title: 'WordPress Configuration File Exposed',
         description: 'WordPress wp-config.php file is accessible and readable, exposing database credentials, authentication keys, salts, table prefix, and debug settings that allow complete compromise of the WordPress installation and underlying database.',
         severity: 'high',
+        levelId: 2,
         category: 'information_disclosure',
         scanner: 'sensitive-path-scout',
         cvss: {
@@ -242,6 +252,7 @@ export const SENSITIVE_PATH_VULNERABILITIES: Record<string, VulnerabilityDefinit
         title: 'Spring Boot Actuator Endpoints Exposed',
         description: 'Spring Boot Actuator management endpoints are publicly accessible without authentication, exposing application internals including environment variables, configuration properties, health status, thread dumps, and potentially enabling remote code execution through certain endpoints.',
         severity: 'high',
+        levelId: 2,
         category: 'information_disclosure',
         scanner: 'sensitive-path-scout',
         cvss: {
@@ -265,6 +276,7 @@ export const SENSITIVE_PATH_VULNERABILITIES: Record<string, VulnerabilityDefinit
         title: 'Spring Boot Heapdump Exposed',
         description: 'Spring Boot Actuator heapdump endpoint is accessible allowing download of JVM heap memory containing sensitive runtime data including session tokens, passwords, encryption keys, personal data, and other secrets temporarily held in application memory.',
         severity: 'critical',
+        levelId: 1,
         category: 'information_disclosure',
         scanner: 'sensitive-path-scout',
         cvss: {
@@ -287,6 +299,7 @@ export const SENSITIVE_PATH_VULNERABILITIES: Record<string, VulnerabilityDefinit
         title: 'PHP Info Page Exposed',
         description: 'PHP info page (phpinfo.php) is publicly accessible revealing complete server configuration including PHP version, loaded modules, environment variables, system paths, and potentially database connection strings that aid attackers in planning targeted attacks.',
         severity: 'medium',
+        levelId: 3,
         category: 'information_disclosure',
         scanner: 'sensitive-path-scout',
         cvss: {
@@ -309,6 +322,7 @@ export const SENSITIVE_PATH_VULNERABILITIES: Record<string, VulnerabilityDefinit
         title: 'Laravel Debug Mode Enabled',
         description: 'Laravel application is running with debug mode enabled in production, exposing detailed stack traces, database queries, environment variables, and potentially the APP_KEY which can be used to decrypt session data and forge authenticated sessions.',
         severity: 'high',
+        levelId: 2,
         category: 'information_disclosure',
         scanner: 'sensitive-path-scout',
         cvss: {
@@ -331,6 +345,7 @@ export const SENSITIVE_PATH_VULNERABILITIES: Record<string, VulnerabilityDefinit
         title: 'GraphQL Introspection Enabled',
         description: 'GraphQL API has introspection enabled in production, allowing attackers to query the complete schema including all types, queries, mutations, and fields, which reveals the entire API structure and aids in discovering sensitive operations and data access points.',
         severity: 'medium',
+        levelId: 3,
         category: 'information_disclosure',
         scanner: 'sensitive-path-scout',
         cvss: {
@@ -353,6 +368,7 @@ export const SENSITIVE_PATH_VULNERABILITIES: Record<string, VulnerabilityDefinit
         title: 'Database Backup File Exposed',
         description: 'Database backup or dump file (.sql, .dump, .bak) is publicly accessible containing complete database contents including user credentials, personal information, business data, and all other stored information enabling massive data breach.',
         severity: 'critical',
+        levelId: 1,
         category: 'information_disclosure',
         scanner: 'sensitive-path-scout',
         cvss: {
@@ -378,6 +394,7 @@ export const SENSITIVE_PATH_VULNERABILITIES: Record<string, VulnerabilityDefinit
         title: 'Swagger/OpenAPI Documentation Exposed',
         description: 'API documentation (swagger.json, openapi.yaml) is publicly accessible revealing complete API structure including all endpoints, parameters, authentication methods, and data models which aids attackers in understanding and exploiting the API systematically.',
         severity: 'low',
+        levelId: 4,
         category: 'information_disclosure',
         scanner: 'sensitive-path-scout',
         cvss: {
@@ -400,6 +417,7 @@ export const SENSITIVE_PATH_VULNERABILITIES: Record<string, VulnerabilityDefinit
         title: 'Prometheus Metrics Endpoint Exposed',
         description: 'Prometheus metrics endpoint (/metrics) is publicly accessible exposing application performance data, error rates, request patterns, resource usage, and potentially business metrics that reveal internal operations and aid in planning attacks.',
         severity: 'medium',
+        levelId: 3,
         category: 'information_disclosure',
         scanner: 'sensitive-path-scout',
         cvss: {
@@ -422,6 +440,7 @@ export const SENSITIVE_PATH_VULNERABILITIES: Record<string, VulnerabilityDefinit
         title: 'Admin Panel Publicly Accessible',
         description: 'Administrative interface is accessible from the public internet without IP restrictions, enabling brute force attacks against admin credentials and exposing sensitive management functionality that should be restricted to internal networks only.',
         severity: 'medium',
+        levelId: 3,
         category: 'access_control',
         scanner: 'sensitive-path-scout',
         cvss: {
@@ -444,6 +463,7 @@ export const SENSITIVE_PATH_VULNERABILITIES: Record<string, VulnerabilityDefinit
         title: 'JavaScript Source Maps Exposed',
         description: 'JavaScript source map files (.js.map) are publicly accessible allowing attackers to view original unminified source code including comments, variable names, internal logic, and potentially security-sensitive implementation details.',
         severity: 'low',
+        levelId: 4,
         category: 'information_disclosure',
         scanner: 'sensitive-path-scout',
         cvss: {
@@ -468,6 +488,7 @@ export const SENSITIVE_PATH_VULNERABILITIES: Record<string, VulnerabilityDefinit
         title: 'Un Protected Config JSON',
         description: 'The application exposes un protected config json in a web-accessible location, which can reveal sensitive configuration, credentials, or operational details and enable attackers to further compromise the system or pivot to other assets.',
         severity: 'medium',
+        levelId: 3,
         category: 'information_disclosure',
         scanner: 'sensitive-path-scout',
         cvss: {
@@ -490,6 +511,7 @@ export const SENSITIVE_PATH_VULNERABILITIES: Record<string, VulnerabilityDefinit
         title: 'Web Server Configuration File Detected',
         description: 'The application exposes web server configuration file detected in a web-accessible location, which can reveal sensitive configuration, credentials, or operational details and enable attackers to further compromise the system or pivot to other assets.',
         severity: 'high',
+        levelId: 2,
         category: 'information_disclosure',
         scanner: 'sensitive-path-scout',
         cvss: {
@@ -512,6 +534,7 @@ export const SENSITIVE_PATH_VULNERABILITIES: Record<string, VulnerabilityDefinit
         title: 'Appsettings JSON Exposed',
         description: 'The application exposes appsettings json exposed in a web-accessible location, which can reveal sensitive configuration, credentials, or operational details and enable attackers to further compromise the system or pivot to other assets.',
         severity: 'high',
+        levelId: 2,
         category: 'information_disclosure',
         scanner: 'sensitive-path-scout',
         cvss: {
@@ -534,6 +557,7 @@ export const SENSITIVE_PATH_VULNERABILITIES: Record<string, VulnerabilityDefinit
         title: 'Spring Config Exposed',
         description: 'The application exposes spring config exposed in a web-accessible location, which can reveal sensitive configuration, credentials, or operational details and enable attackers to further compromise the system or pivot to other assets.',
         severity: 'high',
+        levelId: 2,
         category: 'information_disclosure',
         scanner: 'sensitive-path-scout',
         cvss: {
@@ -556,6 +580,7 @@ export const SENSITIVE_PATH_VULNERABILITIES: Record<string, VulnerabilityDefinit
         title: 'Npmrc Exposed',
         description: 'The application exposes npmrc exposed in a web-accessible location, which can reveal sensitive configuration, credentials, or operational details and enable attackers to further compromise the system or pivot to other assets.',
         severity: 'high',
+        levelId: 2,
         category: 'information_disclosure',
         scanner: 'sensitive-path-scout',
         cvss: {
@@ -578,6 +603,7 @@ export const SENSITIVE_PATH_VULNERABILITIES: Record<string, VulnerabilityDefinit
         title: 'TOML Project File Exposed',
         description: 'The application exposes toml project file exposed in a web-accessible location, which can reveal sensitive configuration, credentials, or operational details and enable attackers to further compromise the system or pivot to other assets.',
         severity: 'low',
+        levelId: 4,
         category: 'information_disclosure',
         scanner: 'sensitive-path-scout',
         cvss: {
@@ -600,6 +626,7 @@ export const SENSITIVE_PATH_VULNERABILITIES: Record<string, VulnerabilityDefinit
         title: 'Rails Database YML Exposed',
         description: 'The application exposes rails database yml exposed in a web-accessible location, which can reveal sensitive configuration, credentials, or operational details and enable attackers to further compromise the system or pivot to other assets.',
         severity: 'high',
+        levelId: 2,
         category: 'information_disclosure',
         scanner: 'sensitive-path-scout',
         cvss: {
@@ -622,6 +649,7 @@ export const SENSITIVE_PATH_VULNERABILITIES: Record<string, VulnerabilityDefinit
         title: 'Drupal Settings PHP Exposed',
         description: 'The application exposes drupal settings php exposed in a web-accessible location, which can reveal sensitive configuration, credentials, or operational details and enable attackers to further compromise the system or pivot to other assets.',
         severity: 'high',
+        levelId: 2,
         category: 'information_disclosure',
         scanner: 'sensitive-path-scout',
         cvss: {
@@ -644,6 +672,7 @@ export const SENSITIVE_PATH_VULNERABILITIES: Record<string, VulnerabilityDefinit
         title: 'Magento Env PHP Exposed',
         description: 'The application exposes magento env php exposed in a web-accessible location, which can reveal sensitive configuration, credentials, or operational details and enable attackers to further compromise the system or pivot to other assets.',
         severity: 'high',
+        levelId: 2,
         category: 'information_disclosure',
         scanner: 'sensitive-path-scout',
         cvss: {
@@ -666,6 +695,7 @@ export const SENSITIVE_PATH_VULNERABILITIES: Record<string, VulnerabilityDefinit
         title: 'Jolokia Exposed',
         description: 'The application exposes jolokia exposed in a web-accessible location, which can reveal sensitive configuration, credentials, or operational details and enable attackers to further compromise the system or pivot to other assets.',
         severity: 'high',
+        levelId: 2,
         category: 'information_disclosure',
         scanner: 'sensitive-path-scout',
         cvss: {
@@ -688,6 +718,7 @@ export const SENSITIVE_PATH_VULNERABILITIES: Record<string, VulnerabilityDefinit
         title: 'SVN Working Copy Database Exposed',
         description: 'The application exposes svn working copy database exposed in a web-accessible location, which can reveal sensitive configuration, credentials, or operational details and enable attackers to further compromise the system or pivot to other assets.',
         severity: 'high',
+        levelId: 2,
         category: 'information_disclosure',
         scanner: 'sensitive-path-scout',
         cvss: {
@@ -710,6 +741,7 @@ export const SENSITIVE_PATH_VULNERABILITIES: Record<string, VulnerabilityDefinit
         title: 'Subversion Repository Detected',
         description: 'The application exposes subversion repository detected in a web-accessible location, which can reveal sensitive configuration, credentials, or operational details and enable attackers to further compromise the system or pivot to other assets.',
         severity: 'high',
+        levelId: 2,
         category: 'information_disclosure',
         scanner: 'sensitive-path-scout',
         cvss: {
@@ -732,6 +764,7 @@ export const SENSITIVE_PATH_VULNERABILITIES: Record<string, VulnerabilityDefinit
         title: 'Mercurial Repository Found',
         description: 'The application exposes mercurial repository found in a web-accessible location, which can reveal sensitive configuration, credentials, or operational details and enable attackers to further compromise the system or pivot to other assets.',
         severity: 'medium',
+        levelId: 3,
         category: 'information_disclosure',
         scanner: 'sensitive-path-scout',
         cvss: {
@@ -754,6 +787,7 @@ export const SENSITIVE_PATH_VULNERABILITIES: Record<string, VulnerabilityDefinit
         title: 'Mercurial Hgrc Exposed',
         description: 'The application exposes mercurial hgrc exposed in a web-accessible location, which can reveal sensitive configuration, credentials, or operational details and enable attackers to further compromise the system or pivot to other assets.',
         severity: 'medium',
+        levelId: 3,
         category: 'information_disclosure',
         scanner: 'sensitive-path-scout',
         cvss: {
@@ -776,6 +810,7 @@ export const SENSITIVE_PATH_VULNERABILITIES: Record<string, VulnerabilityDefinit
         title: 'CVS Root Exposed',
         description: 'The application exposes cvs root exposed in a web-accessible location, which can reveal sensitive configuration, credentials, or operational details and enable attackers to further compromise the system or pivot to other assets.',
         severity: 'medium',
+        levelId: 3,
         category: 'information_disclosure',
         scanner: 'sensitive-path-scout',
         cvss: {
@@ -798,6 +833,7 @@ export const SENSITIVE_PATH_VULNERABILITIES: Record<string, VulnerabilityDefinit
         title: 'CVS Entries Exposed',
         description: 'The application exposes cvs entries exposed in a web-accessible location, which can reveal sensitive configuration, credentials, or operational details and enable attackers to further compromise the system or pivot to other assets.',
         severity: 'medium',
+        levelId: 3,
         category: 'information_disclosure',
         scanner: 'sensitive-path-scout',
         cvss: {
@@ -820,6 +856,7 @@ export const SENSITIVE_PATH_VULNERABILITIES: Record<string, VulnerabilityDefinit
         title: 'Bazaar Repo Exposed',
         description: 'The application exposes bazaar repo exposed in a web-accessible location, which can reveal sensitive configuration, credentials, or operational details and enable attackers to further compromise the system or pivot to other assets.',
         severity: 'medium',
+        levelId: 3,
         category: 'information_disclosure',
         scanner: 'sensitive-path-scout',
         cvss: {
@@ -842,6 +879,7 @@ export const SENSITIVE_PATH_VULNERABILITIES: Record<string, VulnerabilityDefinit
         title: 'Spring Boot Thread Dump Exposed',
         description: 'The application exposes spring boot thread dump exposed in a web-accessible location, which can reveal sensitive configuration, credentials, or operational details and enable attackers to further compromise the system or pivot to other assets.',
         severity: 'high',
+        levelId: 2,
         category: 'information_disclosure',
         scanner: 'sensitive-path-scout',
         cvss: {
@@ -864,6 +902,7 @@ export const SENSITIVE_PATH_VULNERABILITIES: Record<string, VulnerabilityDefinit
         title: 'Redis Rdb Dump Detected',
         description: 'The application exposes redis rdb dump detected in a web-accessible location, which can reveal sensitive configuration, credentials, or operational details and enable attackers to further compromise the system or pivot to other assets.',
         severity: 'high',
+        levelId: 2,
         category: 'information_disclosure',
         scanner: 'sensitive-path-scout',
         cvss: {
@@ -886,6 +925,7 @@ export const SENSITIVE_PATH_VULNERABILITIES: Record<string, VulnerabilityDefinit
         title: 'Atlassian Bitbucket Pipelines Configuration Detected',
         description: 'The application exposes atlassian bitbucket pipelines configuration detected in a web-accessible location, which can reveal sensitive configuration, credentials, or operational details and enable attackers to further compromise the system or pivot to other assets.',
         severity: 'low',
+        levelId: 4,
         category: 'information_disclosure',
         scanner: 'sensitive-path-scout',
         cvss: {
@@ -908,6 +948,7 @@ export const SENSITIVE_PATH_VULNERABILITIES: Record<string, VulnerabilityDefinit
         title: 'AZURE Pipelines Configuration Detected',
         description: 'The application exposes azure pipelines configuration detected in a web-accessible location, which can reveal sensitive configuration, credentials, or operational details and enable attackers to further compromise the system or pivot to other assets.',
         severity: 'low',
+        levelId: 4,
         category: 'information_disclosure',
         scanner: 'sensitive-path-scout',
         cvss: {
@@ -930,6 +971,7 @@ export const SENSITIVE_PATH_VULNERABILITIES: Record<string, VulnerabilityDefinit
         title: 'AWS Code Build Buildspec Detected',
         description: 'The application exposes aws code build buildspec detected in a web-accessible location, which can reveal sensitive configuration, credentials, or operational details and enable attackers to further compromise the system or pivot to other assets.',
         severity: 'low',
+        levelId: 4,
         category: 'information_disclosure',
         scanner: 'sensitive-path-scout',
         cvss: {
@@ -952,6 +994,7 @@ export const SENSITIVE_PATH_VULNERABILITIES: Record<string, VulnerabilityDefinit
         title: 'Github Actions Workflow Detected',
         description: 'The application exposes github actions workflow detected in a web-accessible location, which can reveal sensitive configuration, credentials, or operational details and enable attackers to further compromise the system or pivot to other assets.',
         severity: 'low',
+        levelId: 4,
         category: 'information_disclosure',
         scanner: 'sensitive-path-scout',
         cvss: {
@@ -974,6 +1017,7 @@ export const SENSITIVE_PATH_VULNERABILITIES: Record<string, VulnerabilityDefinit
         title: 'Docker Compose Configuration Detected',
         description: 'The application exposes docker compose configuration detected in a web-accessible location, which can reveal sensitive configuration, credentials, or operational details and enable attackers to further compromise the system or pivot to other assets.',
         severity: 'medium',
+        levelId: 3,
         category: 'information_disclosure',
         scanner: 'sensitive-path-scout',
         cvss: {
@@ -996,6 +1040,7 @@ export const SENSITIVE_PATH_VULNERABILITIES: Record<string, VulnerabilityDefinit
         title: 'Trace Axd',
         description: 'The application exposes trace axd in a web-accessible location, which can reveal sensitive configuration, credentials, or operational details and enable attackers to further compromise the system or pivot to other assets.',
         severity: 'high',
+        levelId: 2,
         category: 'information_disclosure',
         scanner: 'sensitive-path-scout',
         cvss: {
@@ -1018,6 +1063,7 @@ export const SENSITIVE_PATH_VULNERABILITIES: Record<string, VulnerabilityDefinit
         title: 'Elmah Axd Exposed',
         description: 'The application exposes elmah axd exposed in a web-accessible location, which can reveal sensitive configuration, credentials, or operational details and enable attackers to further compromise the system or pivot to other assets.',
         severity: 'high',
+        levelId: 2,
         category: 'information_disclosure',
         scanner: 'sensitive-path-scout',
         cvss: {
@@ -1040,6 +1086,7 @@ export const SENSITIVE_PATH_VULNERABILITIES: Record<string, VulnerabilityDefinit
         title: 'Laravel Log Viewer Enabled',
         description: 'The application exposes laravel log viewer enabled in a web-accessible location, which can reveal sensitive configuration, credentials, or operational details and enable attackers to further compromise the system or pivot to other assets.',
         severity: 'medium',
+        levelId: 3,
         category: 'information_disclosure',
         scanner: 'sensitive-path-scout',
         cvss: {
@@ -1062,6 +1109,7 @@ export const SENSITIVE_PATH_VULNERABILITIES: Record<string, VulnerabilityDefinit
         title: 'Apache Htaccess File Detected',
         description: 'The application exposes apache htaccess file detected in a web-accessible location, which can reveal sensitive configuration, credentials, or operational details and enable attackers to further compromise the system or pivot to other assets.',
         severity: 'medium',
+        levelId: 3,
         category: 'information_disclosure',
         scanner: 'sensitive-path-scout',
         cvss: {
@@ -1084,6 +1132,7 @@ export const SENSITIVE_PATH_VULNERABILITIES: Record<string, VulnerabilityDefinit
         title: 'Apache Server Info Exposed',
         description: 'The application exposes apache server info exposed in a web-accessible location, which can reveal sensitive configuration, credentials, or operational details and enable attackers to further compromise the system or pivot to other assets.',
         severity: 'medium',
+        levelId: 3,
         category: 'information_disclosure',
         scanner: 'sensitive-path-scout',
         cvss: {
@@ -1106,6 +1155,7 @@ export const SENSITIVE_PATH_VULNERABILITIES: Record<string, VulnerabilityDefinit
         title: 'Sqlite Database Detected',
         description: 'The application exposes sqlite database detected in a web-accessible location, which can reveal sensitive configuration, credentials, or operational details and enable attackers to further compromise the system or pivot to other assets.',
         severity: 'high',
+        levelId: 2,
         category: 'information_disclosure',
         scanner: 'sensitive-path-scout',
         cvss: {
@@ -1128,6 +1178,7 @@ export const SENSITIVE_PATH_VULNERABILITIES: Record<string, VulnerabilityDefinit
         title: 'Package Dependencies Detected',
         description: 'The application exposes package dependencies detected in a web-accessible location, which can reveal sensitive configuration, credentials, or operational details and enable attackers to further compromise the system or pivot to other assets.',
         severity: 'medium',
+        levelId: 3,
         category: 'information_disclosure',
         scanner: 'sensitive-path-scout',
         cvss: {
@@ -1150,6 +1201,7 @@ export const SENSITIVE_PATH_VULNERABILITIES: Record<string, VulnerabilityDefinit
         title: 'PHP Composer Dependencies Detected',
         description: 'The application exposes php composer dependencies detected in a web-accessible location, which can reveal sensitive configuration, credentials, or operational details and enable attackers to further compromise the system or pivot to other assets.',
         severity: 'medium',
+        levelId: 3,
         category: 'information_disclosure',
         scanner: 'sensitive-path-scout',
         cvss: {
@@ -1172,6 +1224,7 @@ export const SENSITIVE_PATH_VULNERABILITIES: Record<string, VulnerabilityDefinit
         title: 'Python Requirements Detected',
         description: 'The application exposes python requirements detected in a web-accessible location, which can reveal sensitive configuration, credentials, or operational details and enable attackers to further compromise the system or pivot to other assets.',
         severity: 'low',
+        levelId: 4,
         category: 'information_disclosure',
         scanner: 'sensitive-path-scout',
         cvss: {
@@ -1194,6 +1247,7 @@ export const SENSITIVE_PATH_VULNERABILITIES: Record<string, VulnerabilityDefinit
         title: 'AWS Config Exposed',
         description: 'The application exposes aws config exposed in a web-accessible location, which can reveal sensitive configuration, credentials, or operational details and enable attackers to further compromise the system or pivot to other assets.',
         severity: 'high',
+        levelId: 2,
         category: 'information_disclosure',
         scanner: 'sensitive-path-scout',
         cvss: {
@@ -1216,6 +1270,7 @@ export const SENSITIVE_PATH_VULNERABILITIES: Record<string, VulnerabilityDefinit
         title: 'AZURE Credentials Exposed',
         description: 'The application exposes azure credentials exposed in a web-accessible location, which can reveal sensitive configuration, credentials, or operational details and enable attackers to further compromise the system or pivot to other assets.',
         severity: 'high',
+        levelId: 2,
         category: 'information_disclosure',
         scanner: 'sensitive-path-scout',
         cvss: {
@@ -1238,6 +1293,7 @@ export const SENSITIVE_PATH_VULNERABILITIES: Record<string, VulnerabilityDefinit
         title: 'Helm Values Exposed',
         description: 'The application exposes helm values exposed in a web-accessible location, which can reveal sensitive configuration, credentials, or operational details and enable attackers to further compromise the system or pivot to other assets.',
         severity: 'high',
+        levelId: 2,
         category: 'information_disclosure',
         scanner: 'sensitive-path-scout',
         cvss: {
@@ -1260,6 +1316,7 @@ export const SENSITIVE_PATH_VULNERABILITIES: Record<string, VulnerabilityDefinit
         title: 'SSH Public Key Exposed',
         description: 'The application exposes ssh public key exposed in a web-accessible location, which can reveal sensitive configuration, credentials, or operational details and enable attackers to further compromise the system or pivot to other assets.',
         severity: 'medium',
+        levelId: 3,
         category: 'information_disclosure',
         scanner: 'sensitive-path-scout',
         cvss: {
@@ -1282,6 +1339,7 @@ export const SENSITIVE_PATH_VULNERABILITIES: Record<string, VulnerabilityDefinit
         title: 'SSL Certificate Exposed',
         description: 'The application exposes ssl certificate exposed in a web-accessible location, which can reveal sensitive configuration, credentials, or operational details and enable attackers to further compromise the system or pivot to other assets.',
         severity: 'medium',
+        levelId: 3,
         category: 'information_disclosure',
         scanner: 'sensitive-path-scout',
         cvss: {
@@ -1304,6 +1362,7 @@ export const SENSITIVE_PATH_VULNERABILITIES: Record<string, VulnerabilityDefinit
         title: 'Graph Ql Endpoint Exposed',
         description: 'The application exposes graph ql endpoint exposed in a web-accessible location, which can reveal sensitive configuration, credentials, or operational details and enable attackers to further compromise the system or pivot to other assets.',
         severity: 'medium',
+        levelId: 3,
         category: 'information_disclosure',
         scanner: 'sensitive-path-scout',
         cvss: {
@@ -1326,6 +1385,7 @@ export const SENSITIVE_PATH_VULNERABILITIES: Record<string, VulnerabilityDefinit
         title: 'Graphi Ql Exposed',
         description: 'The application exposes graphi ql exposed in a web-accessible location, which can reveal sensitive configuration, credentials, or operational details and enable attackers to further compromise the system or pivot to other assets.',
         severity: 'medium',
+        levelId: 3,
         category: 'information_disclosure',
         scanner: 'sensitive-path-scout',
         cvss: {
@@ -1348,6 +1408,7 @@ export const SENSITIVE_PATH_VULNERABILITIES: Record<string, VulnerabilityDefinit
         title: 'Terraform Lock Exposed',
         description: 'The application exposes terraform lock exposed in a web-accessible location, which can reveal sensitive configuration, credentials, or operational details and enable attackers to further compromise the system or pivot to other assets.',
         severity: 'medium',
+        levelId: 3,
         category: 'information_disclosure',
         scanner: 'sensitive-path-scout',
         cvss: {
@@ -1370,6 +1431,7 @@ export const SENSITIVE_PATH_VULNERABILITIES: Record<string, VulnerabilityDefinit
         title: 'Terraform Vars Exposed',
         description: 'The application exposes terraform vars exposed in a web-accessible location, which can reveal sensitive configuration, credentials, or operational details and enable attackers to further compromise the system or pivot to other assets.',
         severity: 'high',
+        levelId: 2,
         category: 'information_disclosure',
         scanner: 'sensitive-path-scout',
         cvss: {
@@ -1392,6 +1454,7 @@ export const SENSITIVE_PATH_VULNERABILITIES: Record<string, VulnerabilityDefinit
         title: 'Error Log Exposed',
         description: 'The application exposes error log exposed in a web-accessible location, which can reveal sensitive configuration, credentials, or operational details and enable attackers to further compromise the system or pivot to other assets.',
         severity: 'medium',
+        levelId: 3,
         category: 'information_disclosure',
         scanner: 'sensitive-path-scout',
         cvss: {
@@ -1414,6 +1477,7 @@ export const SENSITIVE_PATH_VULNERABILITIES: Record<string, VulnerabilityDefinit
         title: 'Access Log Exposed',
         description: 'The application exposes access log exposed in a web-accessible location, which can reveal sensitive configuration, credentials, or operational details and enable attackers to further compromise the system or pivot to other assets.',
         severity: 'medium',
+        levelId: 3,
         category: 'information_disclosure',
         scanner: 'sensitive-path-scout',
         cvss: {
@@ -1436,6 +1500,7 @@ export const SENSITIVE_PATH_VULNERABILITIES: Record<string, VulnerabilityDefinit
         title: 'Debug Log Exposed',
         description: 'The application exposes debug log exposed in a web-accessible location, which can reveal sensitive configuration, credentials, or operational details and enable attackers to further compromise the system or pivot to other assets.',
         severity: 'medium',
+        levelId: 3,
         category: 'information_disclosure',
         scanner: 'sensitive-path-scout',
         cvss: {
@@ -1458,6 +1523,7 @@ export const SENSITIVE_PATH_VULNERABILITIES: Record<string, VulnerabilityDefinit
         title: 'Application Log Exposed',
         description: 'The application exposes application log exposed in a web-accessible location, which can reveal sensitive configuration, credentials, or operational details and enable attackers to further compromise the system or pivot to other assets.',
         severity: 'medium',
+        levelId: 3,
         category: 'information_disclosure',
         scanner: 'sensitive-path-scout',
         cvss: {
@@ -1480,6 +1546,7 @@ export const SENSITIVE_PATH_VULNERABILITIES: Record<string, VulnerabilityDefinit
         title: 'Laravel Log Exposed',
         description: 'The application exposes laravel log exposed in a web-accessible location, which can reveal sensitive configuration, credentials, or operational details and enable attackers to further compromise the system or pivot to other assets.',
         severity: 'high',
+        levelId: 2,
         category: 'information_disclosure',
         scanner: 'sensitive-path-scout',
         cvss: {
@@ -1502,6 +1569,7 @@ export const SENSITIVE_PATH_VULNERABILITIES: Record<string, VulnerabilityDefinit
         title: 'Word Press Debug Log Exposed',
         description: 'The application exposes word press debug log exposed in a web-accessible location, which can reveal sensitive configuration, credentials, or operational details and enable attackers to further compromise the system or pivot to other assets.',
         severity: 'high',
+        levelId: 2,
         category: 'information_disclosure',
         scanner: 'sensitive-path-scout',
         cvss: {
@@ -1524,6 +1592,7 @@ export const SENSITIVE_PATH_VULNERABILITIES: Record<string, VulnerabilityDefinit
         title: 'Adminer Exposed',
         description: 'The application exposes adminer exposed in a web-accessible location, which can reveal sensitive configuration, credentials, or operational details and enable attackers to further compromise the system or pivot to other assets.',
         severity: 'high',
+        levelId: 2,
         category: 'information_disclosure',
         scanner: 'sensitive-path-scout',
         cvss: {
@@ -1546,6 +1615,7 @@ export const SENSITIVE_PATH_VULNERABILITIES: Record<string, VulnerabilityDefinit
         title: 'WSDL Exposed',
         description: 'The application exposes wsdl exposed in a web-accessible location, which can reveal sensitive configuration, credentials, or operational details and enable attackers to further compromise the system or pivot to other assets.',
         severity: 'medium',
+        levelId: 3,
         category: 'information_disclosure',
         scanner: 'sensitive-path-scout',
         cvss: {
@@ -1568,6 +1638,7 @@ export const SENSITIVE_PATH_VULNERABILITIES: Record<string, VulnerabilityDefinit
         title: 'Debug Endpoint Exposed',
         description: 'The application exposes debug endpoint exposed in a web-accessible location, which can reveal sensitive configuration, credentials, or operational details and enable attackers to further compromise the system or pivot to other assets.',
         severity: 'high',
+        levelId: 2,
         category: 'information_disclosure',
         scanner: 'sensitive-path-scout',
         cvss: {
@@ -1590,6 +1661,7 @@ export const SENSITIVE_PATH_VULNERABILITIES: Record<string, VulnerabilityDefinit
         title: 'Go Debug Vars Exposed',
         description: 'The application exposes go debug vars exposed in a web-accessible location, which can reveal sensitive configuration, credentials, or operational details and enable attackers to further compromise the system or pivot to other assets.',
         severity: 'high',
+        levelId: 2,
         category: 'information_disclosure',
         scanner: 'sensitive-path-scout',
         cvss: {
@@ -1612,6 +1684,7 @@ export const SENSITIVE_PATH_VULNERABILITIES: Record<string, VulnerabilityDefinit
         title: 'Go Pprof Exposed',
         description: 'The application exposes go pprof exposed in a web-accessible location, which can reveal sensitive configuration, credentials, or operational details and enable attackers to further compromise the system or pivot to other assets.',
         severity: 'high',
+        levelId: 2,
         category: 'information_disclosure',
         scanner: 'sensitive-path-scout',
         cvss: {
@@ -1634,6 +1707,7 @@ export const SENSITIVE_PATH_VULNERABILITIES: Record<string, VulnerabilityDefinit
         title: 'Word Press XML Rpc Exposed',
         description: 'The application exposes word press xml rpc exposed in a web-accessible location, which can reveal sensitive configuration, credentials, or operational details and enable attackers to further compromise the system or pivot to other assets.',
         severity: 'medium',
+        levelId: 3,
         category: 'information_disclosure',
         scanner: 'sensitive-path-scout',
         cvss: {
@@ -1656,6 +1730,7 @@ export const SENSITIVE_PATH_VULNERABILITIES: Record<string, VulnerabilityDefinit
         title: 'Test Endpoint Exposed',
         description: 'The application exposes test endpoint exposed in a web-accessible location, which can reveal sensitive configuration, credentials, or operational details and enable attackers to further compromise the system or pivot to other assets.',
         severity: 'low',
+        levelId: 4,
         category: 'information_disclosure',
         scanner: 'sensitive-path-scout',
         cvss: {
@@ -1678,6 +1753,7 @@ export const SENSITIVE_PATH_VULNERABILITIES: Record<string, VulnerabilityDefinit
         title: 'Staging Endpoint Exposed',
         description: 'The application exposes staging endpoint exposed in a web-accessible location, which can reveal sensitive configuration, credentials, or operational details and enable attackers to further compromise the system or pivot to other assets.',
         severity: 'low',
+        levelId: 4,
         category: 'information_disclosure',
         scanner: 'sensitive-path-scout',
         cvss: {
@@ -1700,6 +1776,7 @@ export const SENSITIVE_PATH_VULNERABILITIES: Record<string, VulnerabilityDefinit
         title: 'Editor Backup File Detected',
         description: 'The application exposes editor backup file detected in a web-accessible location, which can reveal sensitive configuration, credentials, or operational details and enable attackers to further compromise the system or pivot to other assets.',
         severity: 'low',
+        levelId: 4,
         category: 'information_disclosure',
         scanner: 'sensitive-path-scout',
         cvss: {
@@ -1722,6 +1799,7 @@ export const SENSITIVE_PATH_VULNERABILITIES: Record<string, VulnerabilityDefinit
         title: 'VIM Swap File Detected',
         description: 'The application exposes vim swap file detected in a web-accessible location, which can reveal sensitive configuration, credentials, or operational details and enable attackers to further compromise the system or pivot to other assets.',
         severity: 'low',
+        levelId: 4,
         category: 'information_disclosure',
         scanner: 'sensitive-path-scout',
         cvss: {
@@ -1744,6 +1822,7 @@ export const SENSITIVE_PATH_VULNERABILITIES: Record<string, VulnerabilityDefinit
         title: 'Directory Listing Enabled',
         description: 'The application exposes directory listing enabled in a web-accessible location, which can reveal sensitive configuration, credentials, or operational details and enable attackers to further compromise the system or pivot to other assets.',
         severity: 'low',
+        levelId: 4,
         category: 'information_disclosure',
         scanner: 'sensitive-path-scout',
         cvss: {
@@ -1766,6 +1845,7 @@ export const SENSITIVE_PATH_VULNERABILITIES: Record<string, VulnerabilityDefinit
         title: 'AZURE Storage Config Exposed',
         description: 'The application exposes azure storage config exposed in a web-accessible location, which can reveal sensitive configuration, credentials, or operational details and enable attackers to further compromise the system or pivot to other assets.',
         severity: 'high',
+        levelId: 2,
         category: 'information_disclosure',
         scanner: 'sensitive-path-scout',
         cvss: {
@@ -1788,6 +1868,7 @@ export const SENSITIVE_PATH_VULNERABILITIES: Record<string, VulnerabilityDefinit
         title: 'Mongo Rc Exposed',
         description: 'The application exposes mongo rc exposed in a web-accessible location, which can reveal sensitive configuration, credentials, or operational details and enable attackers to further compromise the system or pivot to other assets.',
         severity: 'high',
+        levelId: 2,
         category: 'information_disclosure',
         scanner: 'sensitive-path-scout',
         cvss: {
@@ -1810,6 +1891,7 @@ export const SENSITIVE_PATH_VULNERABILITIES: Record<string, VulnerabilityDefinit
         title: 'Awssam Template Exposed',
         description: 'The application exposes awssam template exposed in a web-accessible location, which can reveal sensitive configuration, credentials, or operational details and enable attackers to further compromise the system or pivot to other assets.',
         severity: 'low',
+        levelId: 4,
         category: 'information_disclosure',
         scanner: 'sensitive-path-scout',
         cvss: {
@@ -1832,6 +1914,7 @@ export const SENSITIVE_PATH_VULNERABILITIES: Record<string, VulnerabilityDefinit
         title: 'Serverless Config Exposed',
         description: 'The application exposes serverless config exposed in a web-accessible location, which can reveal sensitive configuration, credentials, or operational details and enable attackers to further compromise the system or pivot to other assets.',
         severity: 'low',
+        levelId: 4,
         category: 'information_disclosure',
         scanner: 'sensitive-path-scout',
         cvss: {
@@ -1854,6 +1937,7 @@ export const SENSITIVE_PATH_VULNERABILITIES: Record<string, VulnerabilityDefinit
         title: 'Cloud Formation Template Exposed',
         description: 'The application exposes cloud formation template exposed in a web-accessible location, which can reveal sensitive configuration, credentials, or operational details and enable attackers to further compromise the system or pivot to other assets.',
         severity: 'low',
+        levelId: 4,
         category: 'information_disclosure',
         scanner: 'sensitive-path-scout',
         cvss: {