Beveiligingsadvies

CVE-2025-41368

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-03-26 11:37:52

Laatst bijgewerkt 2026-03-26 13:40:20

Toegewezen door INCIBE

CVSS-score 8.7

Status PUBLISHED

Beschrijving

Problem in the Small HTTP Server v3.06.36 service. An authenticated path traversal vulnerability in '/' allows remote users to bypass the intended restrictions of SecurityManager and display any file if they have the appropriate permissions outside the document root configured on the server.

← Alle CVE's bekijken Bekijk op cve.org ↗