CVE-2010-10012
NONE—CVSS v3
—CVSS v2
72.02%
EPSS (exploit probability)
CWE-22CWE
Description
A path traversal vulnerability exists in httpdasm version 0.92, a lightweight Windows HTTP server, that allows unauthenticated attackers to read arbitrary files on the host system. By sending a specially crafted GET request containing a sequence of URL-encoded backslashes and directory traversal patterns, an attacker can escape the web root and access sensitive files outside of the intended directory.
Affected routers (0)
No routers currently mapped to this CVE in our database.