CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
AI Score
Confidence
Low
EPSS
Percentile
87.7%
Peter Sandvik’s Simple Web Server 0.5.1 and earlier allows remote attackers to bypass access restrictions for files via an HTTP request with a sequence of multiple / (slash) characters such as http://www.example.com///file/.
Vendor | Product | Version | CPE |
---|---|---|---|
peter_sandvik | simple_web_server | * | cpe:2.3:a:peter_sandvik:simple_web_server:*:*:*:*:*:*:*:* |