Vulnerability in Dev-Editor

CVE-2005-4421

Dev-Editor 3.0 allows remote attackers to access any directory outside the web root whose name is a substring of the web root directory name.

EPSS: 0.015 (72.5th percentile) — read the EPSS interpretation.

Affected products

  • Dev-editor — versions 2.0, 2.1, 2.1a
  • N/a — versions n/a

References