Vulnerability in Peter Sandvik Simple Web Server

CVE-2002-1238

Peter Sandvik's Simple Web Server 0.5.1 and earlier allows remote attackers to bypass access restrictions for files via an HTTP request with a sequence of multiple / (slash) characters such as http://www.example.com///file/.

EPSS: 0.071 (93.5th percentile) — read the EPSS interpretation.

Affected products

References