← Database

CVE-2009-3902

MEDIUM CVSS: 5.0 Published: 2009-11-06 Modified: 2026-06-16

Description

Directory traversal vulnerability in Cherokee Web Server 0.5.4 and earlier for Windows allows remote attackers to read arbitrary files via a /\.. (slash backslash dot dot) in the URL.

Affected Platforms

Cherokee Cherokee HttpdMicrosoft Windows

Weakness Type

CWE-22

References