CVE-2008-4359

lighttpd before 1.4.20 compares URIs to patterns in the (1) url.redirect and (2) url.rewrite configuration settings before performing URL decoding, which might…

published October 3, 2008

CVSS
—
EPSS
4%
Percentile
91.1
In the wild
Unconfirmed
What it is

lighttpd before 1.4.20 compares URIs to patterns in the (1) url.redirect and (2) url.rewrite configuration settings before performing URL decoding, which might allow remote attackers to bypass intended access restrictions, and obtain sensitive information or possibly modify data.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.04345 · 91.1th percentile
Published
2008-10-03T17:18Z
EPSS history
Timeline
  • 03 OCT 17:18Z
    lighttpd before 1.4.20 compares URIs to patterns in the (1) url.redirect and (2) url.rewrite configuration settings before performing URL decoding, which might…
    cvelistv5