Описание
Acme mini_httpd before 1.16 allows remote attackers to view sensitive files under the document root (such as .htpasswd) via a GET request with a trailing /.
Ссылки
- Third Party Advisory
- Vendor Advisory
- URL Repurposed
- Third Party Advisory
- Vendor Advisory
- URL Repurposed
Уязвимые конфигурации
Конфигурация 1Версия до 1.16 (включая)
cpe:2.3:a:acme:mini_httpd:*:*:*:*:*:*:*:*
EPSS
Процентиль: 77%
0.01079
Низкий
5 Medium
CVSS2
Дефекты
CWE-668
Связанные уязвимости
github
больше 3 лет назад
Acme mini_httpd before 1.16 allows remote attackers to view sensitive files under the document root (such as .htpasswd) via a GET request with a trailing /.
EPSS
Процентиль: 77%
0.01079
Низкий
5 Medium
CVSS2
Дефекты
CWE-668