CVE-2015-5638
Directory traversal vulnerability in H2O before 1.4.5 and 1.5.x before 1.5.0-beta2, when the file.dir directive is enabled, allows remote attackers to read arbitrary files via a crafted URL.
CVSS 2.0 · 4.3 Medium
EPSS 1.7%
KEV · Not listed
Vendors
Products