If that error page is publicly accessible, the "index of password updated" message becomes a breadcrumb leading to live credentials.
To understand the risk, we first have to understand the technology. Most web servers (like Apache or Nginx) are designed to serve specific files, such as index.html . However, if a directory does not have a default index file and "Directory Browsing" is enabled, the server will display a plain-text list of every file in that folder. index of password updated