A directory listing is inappropriately exposed, yielding potentially sensitive information to attackers.