Path Traversal in Xerver

CVE-2009-3561

Directory traversal vulnerability in Xerver HTTP Server 4.32 allows remote attackers to read arbitrary files via a full pathname with a drive letter in the currentPath parameter in a chooseDirectory action.

Vulnerability class: Path Traversal (Directory Traversal)

EPSS: 0.028 (85.0th percentile) — read the EPSS interpretation.

Affected products

  • Xerver — versions 4.32
  • N/a — versions n/a

Weakness classification (CWE)

References