Path Traversal in Japheth Httpdasm
CVE-2010-10012
A path traversal vulnerability exists in httpdasm version 0.92, a lightweight Windows HTTP server, that allows unauthenticated attackers to read arbitrary files on the host system. By sending a specially crafted GET request containing a sequence of URL-encoded backslashes and directory traversal patterns, an attacker can escape the web root and access sensitive files outside of the intended directory.
Vulnerability class: Path Traversal (Directory Traversal)
EPSS: 0.014 (69.8th percentile) — read the EPSS interpretation.
Affected products
- Japheth Httpdasm — versions 0.92
Weakness classification (CWE)
Public proof-of-concept exploits
References
- disclosure@vulncheck.com (exploit)
- disclosure@vulncheck.com (exploit)
- disclosure@vulncheck.com (product)
- disclosure@vulncheck.com (third-party-advisory)
Frequently asked questions
- What is CVE-2010-10012?
- CVE-2010-10012 is a vulnerability in Japheth Httpdasm, classified under Path Traversal. Published 2025-07-23.
- Is CVE-2010-10012 known to be exploited?
- 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.