A directory listing provides an attacker with the complete index of all the resources located inside of the directory. Such an exposure can lead to an attacker gaining access to source code, providing useful information for the attacker to devise exploits. The directory listing may also compromise private or confidential data. The specific risks and consequences vary depending on the specific files that are listed and accessible.