CVE-2009-3902

Directory traversal vulnerability in Cherokee Web Server 0.5.4 and earlier for Windows allows remote attackers to read arbitrary files via a /\.

published November 6, 2009

CVSS
—
EPSS
4%
Percentile
89.1
In the wild
Unconfirmed
What it is

Directory traversal vulnerability in Cherokee Web Server 0.5.4 and earlier for Windows allows remote attackers to read arbitrary files via a /\.. (slash backslash dot dot) in the URL.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.03535 · 89.1th percentile
Published
2009-11-06T15:00Z
EPSS history
Timeline
  • 06 NOV 15:00Z
    Directory traversal vulnerability in Cherokee Web Server 0.5.4 and earlier for Windows allows remote attackers to read arbitrary files via a /\.
    cvelistv5