Web servers can be configured to automatically list the contents of directories that do not have an index page. This allows people to be able to see sensitive directories and files that are supposed to be private. This can lead to vulnerabilities. It gives hackers information about your files that they should not have.