@zerothreatai/vulnerability-registry 3.0.0 → 4.0.0

package/dist/categories/sensitive-paths.js

@@ -15,6 +15,7 @@ export const SENSITIVE_PATH_VULNERABILITIES = {
         title: 'AWS Credentials Exposed',
         description: 'AWS credentials file (.aws/credentials) is publicly accessible containing AWS Access Key ID and Secret Access Key, enabling complete access to AWS services including S3 buckets, EC2 instances, RDS databases, and all cloud resources associated with the compromised account.',
         severity: 'critical',
+        levelId: 1,
         category: 'information_disclosure',
         scanner: 'sensitive-path-scout',
         cvss: {
@@ -37,6 +38,7 @@ export const SENSITIVE_PATH_VULNERABILITIES = {
         title: 'SSH Private Key Exposed',
         description: 'SSH private key file (id_rsa, id_ed25519) is publicly accessible, allowing attackers to authenticate to any system where the corresponding public key is authorized, potentially including production servers, databases, and version control systems.',
         severity: 'critical',
+        levelId: 1,
         category: 'information_disclosure',
         scanner: 'sensitive-path-scout',
         cvss: {
@@ -58,6 +60,7 @@ export const SENSITIVE_PATH_VULNERABILITIES = {
         title: 'SSL/TLS Private Key Exposed',
         description: 'SSL/TLS private key file is publicly accessible, enabling attackers to decrypt all HTTPS traffic, perform man-in-the-middle attacks, and impersonate the server for phishing or credential theft operations against legitimate users.',
         severity: 'critical',
+        levelId: 1,
         category: 'cryptographic',
         scanner: 'sensitive-path-scout',
         cvss: {
@@ -79,6 +82,7 @@ export const SENSITIVE_PATH_VULNERABILITIES = {
         title: 'Rails Master Key Exposed',
         description: 'Rails master.key file is publicly accessible, allowing decryption of all Rails encrypted credentials including database passwords, API keys, and session secrets, enabling complete application compromise and access to all encrypted secrets.',
         severity: 'critical',
+        levelId: 1,
         category: 'information_disclosure',
         scanner: 'sensitive-path-scout',
         cvss: {
@@ -100,6 +104,7 @@ export const SENSITIVE_PATH_VULNERABILITIES = {
         title: 'Terraform State File Exposed',
         description: 'Terraform state file (tfstate) is publicly accessible containing complete infrastructure configuration, resource IDs, IP addresses, and potentially sensitive outputs including database passwords and API keys stored in plain text.',
         severity: 'critical',
+        levelId: 1,
         category: 'information_disclosure',
         scanner: 'sensitive-path-scout',
         cvss: {
@@ -121,6 +126,7 @@ export const SENSITIVE_PATH_VULNERABILITIES = {
         title: 'Kubernetes Config Exposed',
         description: 'Kubernetes kubeconfig file is publicly accessible containing cluster credentials, certificates, and tokens that allow full administrative access to Kubernetes clusters including ability to deploy, modify, and delete all workloads.',
         severity: 'critical',
+        levelId: 1,
         category: 'information_disclosure',
         scanner: 'sensitive-path-scout',
         cvss: {
@@ -142,6 +148,7 @@ export const SENSITIVE_PATH_VULNERABILITIES = {
         title: 'HashiCorp Vault Secret Exposed',
         description: 'HashiCorp Vault secrets or root token exposed, providing access to the centralized secrets management system and all secrets stored within, potentially compromising hundreds of application credentials and encryption keys.',
         severity: 'critical',
+        levelId: 1,
         category: 'information_disclosure',
         scanner: 'sensitive-path-scout',
         cvss: {
@@ -166,6 +173,7 @@ export const SENSITIVE_PATH_VULNERABILITIES = {
         title: 'Git Repository Exposed',
         description: 'Git repository metadata (.git/HEAD, .git/config) is publicly accessible, allowing attackers to download the complete repository including all source code, commit history, configuration files, and potentially credentials committed accidentally.',
         severity: 'high',
+        levelId: 2,
         category: 'information_disclosure',
         scanner: 'sensitive-path-scout',
         cvss: {
@@ -187,6 +195,7 @@ export const SENSITIVE_PATH_VULNERABILITIES = {
         title: 'Environment File Exposed',
         description: 'Environment configuration file (.env, .env.local, .env.production) is publicly accessible containing application secrets, database credentials, API keys, and other sensitive configuration that should never be exposed to end users.',
         severity: 'high',
+        levelId: 2,
         category: 'information_disclosure',
         scanner: 'sensitive-path-scout',
         cvss: {
@@ -208,6 +217,7 @@ export const SENSITIVE_PATH_VULNERABILITIES = {
         title: 'WordPress Configuration File Exposed',
         description: 'WordPress wp-config.php file is accessible and readable, exposing database credentials, authentication keys, salts, table prefix, and debug settings that allow complete compromise of the WordPress installation and underlying database.',
         severity: 'high',
+        levelId: 2,
         category: 'information_disclosure',
         scanner: 'sensitive-path-scout',
         cvss: {
@@ -229,6 +239,7 @@ export const SENSITIVE_PATH_VULNERABILITIES = {
         title: 'Spring Boot Actuator Endpoints Exposed',
         description: 'Spring Boot Actuator management endpoints are publicly accessible without authentication, exposing application internals including environment variables, configuration properties, health status, thread dumps, and potentially enabling remote code execution through certain endpoints.',
         severity: 'high',
+        levelId: 2,
         category: 'information_disclosure',
         scanner: 'sensitive-path-scout',
         cvss: {
@@ -251,6 +262,7 @@ export const SENSITIVE_PATH_VULNERABILITIES = {
         title: 'Spring Boot Heapdump Exposed',
         description: 'Spring Boot Actuator heapdump endpoint is accessible allowing download of JVM heap memory containing sensitive runtime data including session tokens, passwords, encryption keys, personal data, and other secrets temporarily held in application memory.',
         severity: 'critical',
+        levelId: 1,
         category: 'information_disclosure',
         scanner: 'sensitive-path-scout',
         cvss: {
@@ -272,6 +284,7 @@ export const SENSITIVE_PATH_VULNERABILITIES = {
         title: 'PHP Info Page Exposed',
         description: 'PHP info page (phpinfo.php) is publicly accessible revealing complete server configuration including PHP version, loaded modules, environment variables, system paths, and potentially database connection strings that aid attackers in planning targeted attacks.',
         severity: 'medium',
+        levelId: 3,
         category: 'information_disclosure',
         scanner: 'sensitive-path-scout',
         cvss: {
@@ -293,6 +306,7 @@ export const SENSITIVE_PATH_VULNERABILITIES = {
         title: 'Laravel Debug Mode Enabled',
         description: 'Laravel application is running with debug mode enabled in production, exposing detailed stack traces, database queries, environment variables, and potentially the APP_KEY which can be used to decrypt session data and forge authenticated sessions.',
         severity: 'high',
+        levelId: 2,
         category: 'information_disclosure',
         scanner: 'sensitive-path-scout',
         cvss: {
@@ -314,6 +328,7 @@ export const SENSITIVE_PATH_VULNERABILITIES = {
         title: 'GraphQL Introspection Enabled',
         description: 'GraphQL API has introspection enabled in production, allowing attackers to query the complete schema including all types, queries, mutations, and fields, which reveals the entire API structure and aids in discovering sensitive operations and data access points.',
         severity: 'medium',
+        levelId: 3,
         category: 'information_disclosure',
         scanner: 'sensitive-path-scout',
         cvss: {
@@ -335,6 +350,7 @@ export const SENSITIVE_PATH_VULNERABILITIES = {
         title: 'Database Backup File Exposed',
         description: 'Database backup or dump file (.sql, .dump, .bak) is publicly accessible containing complete database contents including user credentials, personal information, business data, and all other stored information enabling massive data breach.',
         severity: 'critical',
+        levelId: 1,
         category: 'information_disclosure',
         scanner: 'sensitive-path-scout',
         cvss: {
@@ -359,6 +375,7 @@ export const SENSITIVE_PATH_VULNERABILITIES = {
         title: 'Swagger/OpenAPI Documentation Exposed',
         description: 'API documentation (swagger.json, openapi.yaml) is publicly accessible revealing complete API structure including all endpoints, parameters, authentication methods, and data models which aids attackers in understanding and exploiting the API systematically.',
         severity: 'low',
+        levelId: 4,
         category: 'information_disclosure',
         scanner: 'sensitive-path-scout',
         cvss: {
@@ -380,6 +397,7 @@ export const SENSITIVE_PATH_VULNERABILITIES = {
         title: 'Prometheus Metrics Endpoint Exposed',
         description: 'Prometheus metrics endpoint (/metrics) is publicly accessible exposing application performance data, error rates, request patterns, resource usage, and potentially business metrics that reveal internal operations and aid in planning attacks.',
         severity: 'medium',
+        levelId: 3,
         category: 'information_disclosure',
         scanner: 'sensitive-path-scout',
         cvss: {
@@ -401,6 +419,7 @@ export const SENSITIVE_PATH_VULNERABILITIES = {
         title: 'Admin Panel Publicly Accessible',
         description: 'Administrative interface is accessible from the public internet without IP restrictions, enabling brute force attacks against admin credentials and exposing sensitive management functionality that should be restricted to internal networks only.',
         severity: 'medium',
+        levelId: 3,
         category: 'access_control',
         scanner: 'sensitive-path-scout',
         cvss: {
@@ -422,6 +441,7 @@ export const SENSITIVE_PATH_VULNERABILITIES = {
         title: 'JavaScript Source Maps Exposed',
         description: 'JavaScript source map files (.js.map) are publicly accessible allowing attackers to view original unminified source code including comments, variable names, internal logic, and potentially security-sensitive implementation details.',
         severity: 'low',
+        levelId: 4,
         category: 'information_disclosure',
         scanner: 'sensitive-path-scout',
         cvss: {
@@ -446,6 +466,7 @@ export const SENSITIVE_PATH_VULNERABILITIES = {
         title: 'Un Protected Config JSON',
         description: 'The application exposes un protected config json in a web-accessible location, which can reveal sensitive configuration, credentials, or operational details and enable attackers to further compromise the system or pivot to other assets.',
         severity: 'medium',
+        levelId: 3,
         category: 'information_disclosure',
         scanner: 'sensitive-path-scout',
         cvss: {
@@ -467,6 +488,7 @@ export const SENSITIVE_PATH_VULNERABILITIES = {
         title: 'Web Server Configuration File Detected',
         description: 'The application exposes web server configuration file detected in a web-accessible location, which can reveal sensitive configuration, credentials, or operational details and enable attackers to further compromise the system or pivot to other assets.',
         severity: 'high',
+        levelId: 2,
         category: 'information_disclosure',
         scanner: 'sensitive-path-scout',
         cvss: {
@@ -488,6 +510,7 @@ export const SENSITIVE_PATH_VULNERABILITIES = {
         title: 'Appsettings JSON Exposed',
         description: 'The application exposes appsettings json exposed in a web-accessible location, which can reveal sensitive configuration, credentials, or operational details and enable attackers to further compromise the system or pivot to other assets.',
         severity: 'high',
+        levelId: 2,
         category: 'information_disclosure',
         scanner: 'sensitive-path-scout',
         cvss: {
@@ -509,6 +532,7 @@ export const SENSITIVE_PATH_VULNERABILITIES = {
         title: 'Spring Config Exposed',
         description: 'The application exposes spring config exposed in a web-accessible location, which can reveal sensitive configuration, credentials, or operational details and enable attackers to further compromise the system or pivot to other assets.',
         severity: 'high',
+        levelId: 2,
         category: 'information_disclosure',
         scanner: 'sensitive-path-scout',
         cvss: {
@@ -530,6 +554,7 @@ export const SENSITIVE_PATH_VULNERABILITIES = {
         title: 'Npmrc Exposed',
         description: 'The application exposes npmrc exposed in a web-accessible location, which can reveal sensitive configuration, credentials, or operational details and enable attackers to further compromise the system or pivot to other assets.',
         severity: 'high',
+        levelId: 2,
         category: 'information_disclosure',
         scanner: 'sensitive-path-scout',
         cvss: {
@@ -551,6 +576,7 @@ export const SENSITIVE_PATH_VULNERABILITIES = {
         title: 'TOML Project File Exposed',
         description: 'The application exposes toml project file exposed in a web-accessible location, which can reveal sensitive configuration, credentials, or operational details and enable attackers to further compromise the system or pivot to other assets.',
         severity: 'low',
+        levelId: 4,
         category: 'information_disclosure',
         scanner: 'sensitive-path-scout',
         cvss: {
@@ -572,6 +598,7 @@ export const SENSITIVE_PATH_VULNERABILITIES = {
         title: 'Rails Database YML Exposed',
         description: 'The application exposes rails database yml exposed in a web-accessible location, which can reveal sensitive configuration, credentials, or operational details and enable attackers to further compromise the system or pivot to other assets.',
         severity: 'high',
+        levelId: 2,
         category: 'information_disclosure',
         scanner: 'sensitive-path-scout',
         cvss: {
@@ -593,6 +620,7 @@ export const SENSITIVE_PATH_VULNERABILITIES = {
         title: 'Drupal Settings PHP Exposed',
         description: 'The application exposes drupal settings php exposed in a web-accessible location, which can reveal sensitive configuration, credentials, or operational details and enable attackers to further compromise the system or pivot to other assets.',
         severity: 'high',
+        levelId: 2,
         category: 'information_disclosure',
         scanner: 'sensitive-path-scout',
         cvss: {
@@ -614,6 +642,7 @@ export const SENSITIVE_PATH_VULNERABILITIES = {
         title: 'Magento Env PHP Exposed',
         description: 'The application exposes magento env php exposed in a web-accessible location, which can reveal sensitive configuration, credentials, or operational details and enable attackers to further compromise the system or pivot to other assets.',
         severity: 'high',
+        levelId: 2,
         category: 'information_disclosure',
         scanner: 'sensitive-path-scout',
         cvss: {
@@ -635,6 +664,7 @@ export const SENSITIVE_PATH_VULNERABILITIES = {
         title: 'Jolokia Exposed',
         description: 'The application exposes jolokia exposed in a web-accessible location, which can reveal sensitive configuration, credentials, or operational details and enable attackers to further compromise the system or pivot to other assets.',
         severity: 'high',
+        levelId: 2,
         category: 'information_disclosure',
         scanner: 'sensitive-path-scout',
         cvss: {
@@ -656,6 +686,7 @@ export const SENSITIVE_PATH_VULNERABILITIES = {
         title: 'SVN Working Copy Database Exposed',
         description: 'The application exposes svn working copy database exposed in a web-accessible location, which can reveal sensitive configuration, credentials, or operational details and enable attackers to further compromise the system or pivot to other assets.',
         severity: 'high',
+        levelId: 2,
         category: 'information_disclosure',
         scanner: 'sensitive-path-scout',
         cvss: {
@@ -677,6 +708,7 @@ export const SENSITIVE_PATH_VULNERABILITIES = {
         title: 'Subversion Repository Detected',
         description: 'The application exposes subversion repository detected in a web-accessible location, which can reveal sensitive configuration, credentials, or operational details and enable attackers to further compromise the system or pivot to other assets.',
         severity: 'high',
+        levelId: 2,
         category: 'information_disclosure',
         scanner: 'sensitive-path-scout',
         cvss: {
@@ -698,6 +730,7 @@ export const SENSITIVE_PATH_VULNERABILITIES = {
         title: 'Mercurial Repository Found',
         description: 'The application exposes mercurial repository found in a web-accessible location, which can reveal sensitive configuration, credentials, or operational details and enable attackers to further compromise the system or pivot to other assets.',
         severity: 'medium',
+        levelId: 3,
         category: 'information_disclosure',
         scanner: 'sensitive-path-scout',
         cvss: {
@@ -719,6 +752,7 @@ export const SENSITIVE_PATH_VULNERABILITIES = {
         title: 'Mercurial Hgrc Exposed',
         description: 'The application exposes mercurial hgrc exposed in a web-accessible location, which can reveal sensitive configuration, credentials, or operational details and enable attackers to further compromise the system or pivot to other assets.',
         severity: 'medium',
+        levelId: 3,
         category: 'information_disclosure',
         scanner: 'sensitive-path-scout',
         cvss: {
@@ -740,6 +774,7 @@ export const SENSITIVE_PATH_VULNERABILITIES = {
         title: 'CVS Root Exposed',
         description: 'The application exposes cvs root exposed in a web-accessible location, which can reveal sensitive configuration, credentials, or operational details and enable attackers to further compromise the system or pivot to other assets.',
         severity: 'medium',
+        levelId: 3,
         category: 'information_disclosure',
         scanner: 'sensitive-path-scout',
         cvss: {
@@ -761,6 +796,7 @@ export const SENSITIVE_PATH_VULNERABILITIES = {
         title: 'CVS Entries Exposed',
         description: 'The application exposes cvs entries exposed in a web-accessible location, which can reveal sensitive configuration, credentials, or operational details and enable attackers to further compromise the system or pivot to other assets.',
         severity: 'medium',
+        levelId: 3,
         category: 'information_disclosure',
         scanner: 'sensitive-path-scout',
         cvss: {
@@ -782,6 +818,7 @@ export const SENSITIVE_PATH_VULNERABILITIES = {
         title: 'Bazaar Repo Exposed',
         description: 'The application exposes bazaar repo exposed in a web-accessible location, which can reveal sensitive configuration, credentials, or operational details and enable attackers to further compromise the system or pivot to other assets.',
         severity: 'medium',
+        levelId: 3,
         category: 'information_disclosure',
         scanner: 'sensitive-path-scout',
         cvss: {
@@ -803,6 +840,7 @@ export const SENSITIVE_PATH_VULNERABILITIES = {
         title: 'Spring Boot Thread Dump Exposed',
         description: 'The application exposes spring boot thread dump exposed in a web-accessible location, which can reveal sensitive configuration, credentials, or operational details and enable attackers to further compromise the system or pivot to other assets.',
         severity: 'high',
+        levelId: 2,
         category: 'information_disclosure',
         scanner: 'sensitive-path-scout',
         cvss: {
@@ -824,6 +862,7 @@ export const SENSITIVE_PATH_VULNERABILITIES = {
         title: 'Redis Rdb Dump Detected',
         description: 'The application exposes redis rdb dump detected in a web-accessible location, which can reveal sensitive configuration, credentials, or operational details and enable attackers to further compromise the system or pivot to other assets.',
         severity: 'high',
+        levelId: 2,
         category: 'information_disclosure',
         scanner: 'sensitive-path-scout',
         cvss: {
@@ -845,6 +884,7 @@ export const SENSITIVE_PATH_VULNERABILITIES = {
         title: 'Atlassian Bitbucket Pipelines Configuration Detected',
         description: 'The application exposes atlassian bitbucket pipelines configuration detected in a web-accessible location, which can reveal sensitive configuration, credentials, or operational details and enable attackers to further compromise the system or pivot to other assets.',
         severity: 'low',
+        levelId: 4,
         category: 'information_disclosure',
         scanner: 'sensitive-path-scout',
         cvss: {
@@ -866,6 +906,7 @@ export const SENSITIVE_PATH_VULNERABILITIES = {
         title: 'AZURE Pipelines Configuration Detected',
         description: 'The application exposes azure pipelines configuration detected in a web-accessible location, which can reveal sensitive configuration, credentials, or operational details and enable attackers to further compromise the system or pivot to other assets.',
         severity: 'low',
+        levelId: 4,
         category: 'information_disclosure',
         scanner: 'sensitive-path-scout',
         cvss: {
@@ -887,6 +928,7 @@ export const SENSITIVE_PATH_VULNERABILITIES = {
         title: 'AWS Code Build Buildspec Detected',
         description: 'The application exposes aws code build buildspec detected in a web-accessible location, which can reveal sensitive configuration, credentials, or operational details and enable attackers to further compromise the system or pivot to other assets.',
         severity: 'low',
+        levelId: 4,
         category: 'information_disclosure',
         scanner: 'sensitive-path-scout',
         cvss: {
@@ -908,6 +950,7 @@ export const SENSITIVE_PATH_VULNERABILITIES = {
         title: 'Github Actions Workflow Detected',
         description: 'The application exposes github actions workflow detected in a web-accessible location, which can reveal sensitive configuration, credentials, or operational details and enable attackers to further compromise the system or pivot to other assets.',
         severity: 'low',
+        levelId: 4,
         category: 'information_disclosure',
         scanner: 'sensitive-path-scout',
         cvss: {
@@ -929,6 +972,7 @@ export const SENSITIVE_PATH_VULNERABILITIES = {
         title: 'Docker Compose Configuration Detected',
         description: 'The application exposes docker compose configuration detected in a web-accessible location, which can reveal sensitive configuration, credentials, or operational details and enable attackers to further compromise the system or pivot to other assets.',
         severity: 'medium',
+        levelId: 3,
         category: 'information_disclosure',
         scanner: 'sensitive-path-scout',
         cvss: {
@@ -950,6 +994,7 @@ export const SENSITIVE_PATH_VULNERABILITIES = {
         title: 'Trace Axd',
         description: 'The application exposes trace axd in a web-accessible location, which can reveal sensitive configuration, credentials, or operational details and enable attackers to further compromise the system or pivot to other assets.',
         severity: 'high',
+        levelId: 2,
         category: 'information_disclosure',
         scanner: 'sensitive-path-scout',
         cvss: {
@@ -971,6 +1016,7 @@ export const SENSITIVE_PATH_VULNERABILITIES = {
         title: 'Elmah Axd Exposed',
         description: 'The application exposes elmah axd exposed in a web-accessible location, which can reveal sensitive configuration, credentials, or operational details and enable attackers to further compromise the system or pivot to other assets.',
         severity: 'high',
+        levelId: 2,
         category: 'information_disclosure',
         scanner: 'sensitive-path-scout',
         cvss: {
@@ -992,6 +1038,7 @@ export const SENSITIVE_PATH_VULNERABILITIES = {
         title: 'Laravel Log Viewer Enabled',
         description: 'The application exposes laravel log viewer enabled in a web-accessible location, which can reveal sensitive configuration, credentials, or operational details and enable attackers to further compromise the system or pivot to other assets.',
         severity: 'medium',
+        levelId: 3,
         category: 'information_disclosure',
         scanner: 'sensitive-path-scout',
         cvss: {
@@ -1013,6 +1060,7 @@ export const SENSITIVE_PATH_VULNERABILITIES = {
         title: 'Apache Htaccess File Detected',
         description: 'The application exposes apache htaccess file detected in a web-accessible location, which can reveal sensitive configuration, credentials, or operational details and enable attackers to further compromise the system or pivot to other assets.',
         severity: 'medium',
+        levelId: 3,
         category: 'information_disclosure',
         scanner: 'sensitive-path-scout',
         cvss: {
@@ -1034,6 +1082,7 @@ export const SENSITIVE_PATH_VULNERABILITIES = {
         title: 'Apache Server Info Exposed',
         description: 'The application exposes apache server info exposed in a web-accessible location, which can reveal sensitive configuration, credentials, or operational details and enable attackers to further compromise the system or pivot to other assets.',
         severity: 'medium',
+        levelId: 3,
         category: 'information_disclosure',
         scanner: 'sensitive-path-scout',
         cvss: {
@@ -1055,6 +1104,7 @@ export const SENSITIVE_PATH_VULNERABILITIES = {
         title: 'Sqlite Database Detected',
         description: 'The application exposes sqlite database detected in a web-accessible location, which can reveal sensitive configuration, credentials, or operational details and enable attackers to further compromise the system or pivot to other assets.',
         severity: 'high',
+        levelId: 2,
         category: 'information_disclosure',
         scanner: 'sensitive-path-scout',
         cvss: {
@@ -1076,6 +1126,7 @@ export const SENSITIVE_PATH_VULNERABILITIES = {
         title: 'Package Dependencies Detected',
         description: 'The application exposes package dependencies detected in a web-accessible location, which can reveal sensitive configuration, credentials, or operational details and enable attackers to further compromise the system or pivot to other assets.',
         severity: 'medium',
+        levelId: 3,
         category: 'information_disclosure',
         scanner: 'sensitive-path-scout',
         cvss: {
@@ -1097,6 +1148,7 @@ export const SENSITIVE_PATH_VULNERABILITIES = {
         title: 'PHP Composer Dependencies Detected',
         description: 'The application exposes php composer dependencies detected in a web-accessible location, which can reveal sensitive configuration, credentials, or operational details and enable attackers to further compromise the system or pivot to other assets.',
         severity: 'medium',
+        levelId: 3,
         category: 'information_disclosure',
         scanner: 'sensitive-path-scout',
         cvss: {
@@ -1118,6 +1170,7 @@ export const SENSITIVE_PATH_VULNERABILITIES = {
         title: 'Python Requirements Detected',
         description: 'The application exposes python requirements detected in a web-accessible location, which can reveal sensitive configuration, credentials, or operational details and enable attackers to further compromise the system or pivot to other assets.',
         severity: 'low',
+        levelId: 4,
         category: 'information_disclosure',
         scanner: 'sensitive-path-scout',
         cvss: {
@@ -1139,6 +1192,7 @@ export const SENSITIVE_PATH_VULNERABILITIES = {
         title: 'AWS Config Exposed',
         description: 'The application exposes aws config exposed in a web-accessible location, which can reveal sensitive configuration, credentials, or operational details and enable attackers to further compromise the system or pivot to other assets.',
         severity: 'high',
+        levelId: 2,
         category: 'information_disclosure',
         scanner: 'sensitive-path-scout',
         cvss: {
@@ -1160,6 +1214,7 @@ export const SENSITIVE_PATH_VULNERABILITIES = {
         title: 'AZURE Credentials Exposed',
         description: 'The application exposes azure credentials exposed in a web-accessible location, which can reveal sensitive configuration, credentials, or operational details and enable attackers to further compromise the system or pivot to other assets.',
         severity: 'high',
+        levelId: 2,
         category: 'information_disclosure',
         scanner: 'sensitive-path-scout',
         cvss: {
@@ -1181,6 +1236,7 @@ export const SENSITIVE_PATH_VULNERABILITIES = {
         title: 'Helm Values Exposed',
         description: 'The application exposes helm values exposed in a web-accessible location, which can reveal sensitive configuration, credentials, or operational details and enable attackers to further compromise the system or pivot to other assets.',
         severity: 'high',
+        levelId: 2,
         category: 'information_disclosure',
         scanner: 'sensitive-path-scout',
         cvss: {
@@ -1202,6 +1258,7 @@ export const SENSITIVE_PATH_VULNERABILITIES = {
         title: 'SSH Public Key Exposed',
         description: 'The application exposes ssh public key exposed in a web-accessible location, which can reveal sensitive configuration, credentials, or operational details and enable attackers to further compromise the system or pivot to other assets.',
         severity: 'medium',
+        levelId: 3,
         category: 'information_disclosure',
         scanner: 'sensitive-path-scout',
         cvss: {
@@ -1223,6 +1280,7 @@ export const SENSITIVE_PATH_VULNERABILITIES = {
         title: 'SSL Certificate Exposed',
         description: 'The application exposes ssl certificate exposed in a web-accessible location, which can reveal sensitive configuration, credentials, or operational details and enable attackers to further compromise the system or pivot to other assets.',
         severity: 'medium',
+        levelId: 3,
         category: 'information_disclosure',
         scanner: 'sensitive-path-scout',
         cvss: {
@@ -1244,6 +1302,7 @@ export const SENSITIVE_PATH_VULNERABILITIES = {
         title: 'Graph Ql Endpoint Exposed',
         description: 'The application exposes graph ql endpoint exposed in a web-accessible location, which can reveal sensitive configuration, credentials, or operational details and enable attackers to further compromise the system or pivot to other assets.',
         severity: 'medium',
+        levelId: 3,
         category: 'information_disclosure',
         scanner: 'sensitive-path-scout',
         cvss: {
@@ -1265,6 +1324,7 @@ export const SENSITIVE_PATH_VULNERABILITIES = {
         title: 'Graphi Ql Exposed',
         description: 'The application exposes graphi ql exposed in a web-accessible location, which can reveal sensitive configuration, credentials, or operational details and enable attackers to further compromise the system or pivot to other assets.',
         severity: 'medium',
+        levelId: 3,
         category: 'information_disclosure',
         scanner: 'sensitive-path-scout',
         cvss: {
@@ -1286,6 +1346,7 @@ export const SENSITIVE_PATH_VULNERABILITIES = {
         title: 'Terraform Lock Exposed',
         description: 'The application exposes terraform lock exposed in a web-accessible location, which can reveal sensitive configuration, credentials, or operational details and enable attackers to further compromise the system or pivot to other assets.',
         severity: 'medium',
+        levelId: 3,
         category: 'information_disclosure',
         scanner: 'sensitive-path-scout',
         cvss: {
@@ -1307,6 +1368,7 @@ export const SENSITIVE_PATH_VULNERABILITIES = {
         title: 'Terraform Vars Exposed',
         description: 'The application exposes terraform vars exposed in a web-accessible location, which can reveal sensitive configuration, credentials, or operational details and enable attackers to further compromise the system or pivot to other assets.',
         severity: 'high',
+        levelId: 2,
         category: 'information_disclosure',
         scanner: 'sensitive-path-scout',
         cvss: {
@@ -1328,6 +1390,7 @@ export const SENSITIVE_PATH_VULNERABILITIES = {
         title: 'Error Log Exposed',
         description: 'The application exposes error log exposed in a web-accessible location, which can reveal sensitive configuration, credentials, or operational details and enable attackers to further compromise the system or pivot to other assets.',
         severity: 'medium',
+        levelId: 3,
         category: 'information_disclosure',
         scanner: 'sensitive-path-scout',
         cvss: {
@@ -1349,6 +1412,7 @@ export const SENSITIVE_PATH_VULNERABILITIES = {
         title: 'Access Log Exposed',
         description: 'The application exposes access log exposed in a web-accessible location, which can reveal sensitive configuration, credentials, or operational details and enable attackers to further compromise the system or pivot to other assets.',
         severity: 'medium',
+        levelId: 3,
         category: 'information_disclosure',
         scanner: 'sensitive-path-scout',
         cvss: {
@@ -1370,6 +1434,7 @@ export const SENSITIVE_PATH_VULNERABILITIES = {
         title: 'Debug Log Exposed',
         description: 'The application exposes debug log exposed in a web-accessible location, which can reveal sensitive configuration, credentials, or operational details and enable attackers to further compromise the system or pivot to other assets.',
         severity: 'medium',
+        levelId: 3,
         category: 'information_disclosure',
         scanner: 'sensitive-path-scout',
         cvss: {
@@ -1391,6 +1456,7 @@ export const SENSITIVE_PATH_VULNERABILITIES = {
         title: 'Application Log Exposed',
         description: 'The application exposes application log exposed in a web-accessible location, which can reveal sensitive configuration, credentials, or operational details and enable attackers to further compromise the system or pivot to other assets.',
         severity: 'medium',
+        levelId: 3,
         category: 'information_disclosure',
         scanner: 'sensitive-path-scout',
         cvss: {
@@ -1412,6 +1478,7 @@ export const SENSITIVE_PATH_VULNERABILITIES = {
         title: 'Laravel Log Exposed',
         description: 'The application exposes laravel log exposed in a web-accessible location, which can reveal sensitive configuration, credentials, or operational details and enable attackers to further compromise the system or pivot to other assets.',
         severity: 'high',
+        levelId: 2,
         category: 'information_disclosure',
         scanner: 'sensitive-path-scout',
         cvss: {
@@ -1433,6 +1500,7 @@ export const SENSITIVE_PATH_VULNERABILITIES = {
         title: 'Word Press Debug Log Exposed',
         description: 'The application exposes word press debug log exposed in a web-accessible location, which can reveal sensitive configuration, credentials, or operational details and enable attackers to further compromise the system or pivot to other assets.',
         severity: 'high',
+        levelId: 2,
         category: 'information_disclosure',
         scanner: 'sensitive-path-scout',
         cvss: {
@@ -1454,6 +1522,7 @@ export const SENSITIVE_PATH_VULNERABILITIES = {
         title: 'Adminer Exposed',
         description: 'The application exposes adminer exposed in a web-accessible location, which can reveal sensitive configuration, credentials, or operational details and enable attackers to further compromise the system or pivot to other assets.',
         severity: 'high',
+        levelId: 2,
         category: 'information_disclosure',
         scanner: 'sensitive-path-scout',
         cvss: {
@@ -1475,6 +1544,7 @@ export const SENSITIVE_PATH_VULNERABILITIES = {
         title: 'WSDL Exposed',
         description: 'The application exposes wsdl exposed in a web-accessible location, which can reveal sensitive configuration, credentials, or operational details and enable attackers to further compromise the system or pivot to other assets.',
         severity: 'medium',
+        levelId: 3,
         category: 'information_disclosure',
         scanner: 'sensitive-path-scout',
         cvss: {
@@ -1496,6 +1566,7 @@ export const SENSITIVE_PATH_VULNERABILITIES = {
         title: 'Debug Endpoint Exposed',
         description: 'The application exposes debug endpoint exposed in a web-accessible location, which can reveal sensitive configuration, credentials, or operational details and enable attackers to further compromise the system or pivot to other assets.',
         severity: 'high',
+        levelId: 2,
         category: 'information_disclosure',
         scanner: 'sensitive-path-scout',
         cvss: {
@@ -1517,6 +1588,7 @@ export const SENSITIVE_PATH_VULNERABILITIES = {
         title: 'Go Debug Vars Exposed',
         description: 'The application exposes go debug vars exposed in a web-accessible location, which can reveal sensitive configuration, credentials, or operational details and enable attackers to further compromise the system or pivot to other assets.',
         severity: 'high',
+        levelId: 2,
         category: 'information_disclosure',
         scanner: 'sensitive-path-scout',
         cvss: {
@@ -1538,6 +1610,7 @@ export const SENSITIVE_PATH_VULNERABILITIES = {
         title: 'Go Pprof Exposed',
         description: 'The application exposes go pprof exposed in a web-accessible location, which can reveal sensitive configuration, credentials, or operational details and enable attackers to further compromise the system or pivot to other assets.',
         severity: 'high',
+        levelId: 2,
         category: 'information_disclosure',
         scanner: 'sensitive-path-scout',
         cvss: {
@@ -1559,6 +1632,7 @@ export const SENSITIVE_PATH_VULNERABILITIES = {
         title: 'Word Press XML Rpc Exposed',
         description: 'The application exposes word press xml rpc exposed in a web-accessible location, which can reveal sensitive configuration, credentials, or operational details and enable attackers to further compromise the system or pivot to other assets.',
         severity: 'medium',
+        levelId: 3,
         category: 'information_disclosure',
         scanner: 'sensitive-path-scout',
         cvss: {
@@ -1580,6 +1654,7 @@ export const SENSITIVE_PATH_VULNERABILITIES = {
         title: 'Test Endpoint Exposed',
         description: 'The application exposes test endpoint exposed in a web-accessible location, which can reveal sensitive configuration, credentials, or operational details and enable attackers to further compromise the system or pivot to other assets.',
         severity: 'low',
+        levelId: 4,
         category: 'information_disclosure',
         scanner: 'sensitive-path-scout',
         cvss: {
@@ -1601,6 +1676,7 @@ export const SENSITIVE_PATH_VULNERABILITIES = {
         title: 'Staging Endpoint Exposed',
         description: 'The application exposes staging endpoint exposed in a web-accessible location, which can reveal sensitive configuration, credentials, or operational details and enable attackers to further compromise the system or pivot to other assets.',
         severity: 'low',
+        levelId: 4,
         category: 'information_disclosure',
         scanner: 'sensitive-path-scout',
         cvss: {
@@ -1622,6 +1698,7 @@ export const SENSITIVE_PATH_VULNERABILITIES = {
         title: 'Editor Backup File Detected',
         description: 'The application exposes editor backup file detected in a web-accessible location, which can reveal sensitive configuration, credentials, or operational details and enable attackers to further compromise the system or pivot to other assets.',
         severity: 'low',
+        levelId: 4,
         category: 'information_disclosure',
         scanner: 'sensitive-path-scout',
         cvss: {
@@ -1643,6 +1720,7 @@ export const SENSITIVE_PATH_VULNERABILITIES = {
         title: 'VIM Swap File Detected',
         description: 'The application exposes vim swap file detected in a web-accessible location, which can reveal sensitive configuration, credentials, or operational details and enable attackers to further compromise the system or pivot to other assets.',
         severity: 'low',
+        levelId: 4,
         category: 'information_disclosure',
         scanner: 'sensitive-path-scout',
         cvss: {
@@ -1664,6 +1742,7 @@ export const SENSITIVE_PATH_VULNERABILITIES = {
         title: 'Directory Listing Enabled',
         description: 'The application exposes directory listing enabled in a web-accessible location, which can reveal sensitive configuration, credentials, or operational details and enable attackers to further compromise the system or pivot to other assets.',
         severity: 'low',
+        levelId: 4,
         category: 'information_disclosure',
         scanner: 'sensitive-path-scout',
         cvss: {
@@ -1685,6 +1764,7 @@ export const SENSITIVE_PATH_VULNERABILITIES = {
         title: 'AZURE Storage Config Exposed',
         description: 'The application exposes azure storage config exposed in a web-accessible location, which can reveal sensitive configuration, credentials, or operational details and enable attackers to further compromise the system or pivot to other assets.',
         severity: 'high',
+        levelId: 2,
         category: 'information_disclosure',
         scanner: 'sensitive-path-scout',
         cvss: {
@@ -1706,6 +1786,7 @@ export const SENSITIVE_PATH_VULNERABILITIES = {
         title: 'Mongo Rc Exposed',
         description: 'The application exposes mongo rc exposed in a web-accessible location, which can reveal sensitive configuration, credentials, or operational details and enable attackers to further compromise the system or pivot to other assets.',
         severity: 'high',
+        levelId: 2,
         category: 'information_disclosure',
         scanner: 'sensitive-path-scout',
         cvss: {
@@ -1727,6 +1808,7 @@ export const SENSITIVE_PATH_VULNERABILITIES = {
         title: 'Awssam Template Exposed',
         description: 'The application exposes awssam template exposed in a web-accessible location, which can reveal sensitive configuration, credentials, or operational details and enable attackers to further compromise the system or pivot to other assets.',
         severity: 'low',
+        levelId: 4,
         category: 'information_disclosure',
         scanner: 'sensitive-path-scout',
         cvss: {
@@ -1748,6 +1830,7 @@ export const SENSITIVE_PATH_VULNERABILITIES = {
         title: 'Serverless Config Exposed',
         description: 'The application exposes serverless config exposed in a web-accessible location, which can reveal sensitive configuration, credentials, or operational details and enable attackers to further compromise the system or pivot to other assets.',
         severity: 'low',
+        levelId: 4,
         category: 'information_disclosure',
         scanner: 'sensitive-path-scout',
         cvss: {
@@ -1769,6 +1852,7 @@ export const SENSITIVE_PATH_VULNERABILITIES = {
         title: 'Cloud Formation Template Exposed',
         description: 'The application exposes cloud formation template exposed in a web-accessible location, which can reveal sensitive configuration, credentials, or operational details and enable attackers to further compromise the system or pivot to other assets.',
         severity: 'low',
+        levelId: 4,
         category: 'information_disclosure',
         scanner: 'sensitive-path-scout',
         cvss: {