Security Advisory
CVE-2025-41368
CVE vulnerability detail — eXtreme Datacenter Security Operations
Description
Problem in the Small HTTP Server v3.06.36 service. An authenticated path traversal vulnerability in / allows remote users to bypass the intended restrictions of SecurityManager and display any file if they have the appropriate permissions outside the document root configured on the server.