The page is expected to contain data due to its Content type header, but no data was actually received.
This in itself is not a vulnerability, but is often the sign of other problems.
What can happen?
There are no direct security implications of serving an empty file, but it is often a sign of a backend error or something else being wrong.
Take a look at what is causing this issue. If you come to the conclusion that everything is alright, just mark it as Accepted Risk and we will filter out the finding from future reports. If it still shows up in future scans, just send us an email at firstname.lastname@example.org and we will look into it.