CVE-2018-16478
CVE-2018-16478
Vexday Risk Score
3Low
SSVC decision (CISA)
Track
No exploitation signal → monitor
CVSS —EPSS 1.3%KEV nãoPoC —Nuclei —Metasploit —Patch —
Lifecycle
04 Dec 2018Published on NVD
Recommendation: Monitor — no exploitation signal at the moment.
A Path Traversal in simplehttpserver versions <=0.2.1 allows to list any file in another folder of web root.
Affected products
n/a · simplehttpserverReferences
https://hackerone.com/reports/403703