Hackerone Is the Docroot Folder a Vulnerability?

Question

Burglary protection

Good afternoon, don't jump right away. I ask for a constructive answer.
Recently decided to master ethical hacking. so that's the question.
found with the help of Owsap Zap Folder directories there is a Dokrut folder
How do I understand this is a vulnerability or not? If yes, how to report please tell me

Answer 1

The very presence of the folder can be called a vulnerability like OWASP A6 - Security Missconfiguration.
Its importance depends on what you can do with this folder access.
If nothing, then you should not count on a reward.
https://www.owasp.org/index.php/Top_10-2017_A6-Sec...