Design/Logic Flaw

2010-06-1820:30:00

PRIOn knowledge base

www.prio-n.com

7.3 High

AI Score

Confidence

Low

0.906 High

EPSS

Percentile

98.8%

JSON

LiteSpeed Technologies LiteSpeed Web Server 4.0.x before 4.0.15 allows remote attackers to read the source code of scripts via an HTTP request with a null byte followed by a .txt file extension.

CPENameOperatorVersion
litespeed_web_servereq4.0.12
litespeed_web_servereq4.0.4
litespeed_web_servereq4.0.3
litespeed_web_servereq4.0.10
litespeed_web_servereq4.0.6
litespeed_web_servereq4.0.8
litespeed_web_servereq4.0.7
litespeed_web_servereq4.0.9
litespeed_web_servereq4.0.1
litespeed_web_servereq4.0.13

Name	Operator	Version
litespeed_web_server	eq	4.0.12
litespeed_web_server	eq	4.0.4
litespeed_web_server	eq	4.0.3
litespeed_web_server	eq	4.0.10
litespeed_web_server	eq	4.0.6
litespeed_web_server	eq	4.0.8
litespeed_web_server	eq	4.0.7
litespeed_web_server	eq	4.0.9
litespeed_web_server	eq	4.0.1
litespeed_web_server	eq	4.0.13