Back

CVE-2002-1864

Directory traversal vulnerability in Simple Web Server (SWS) 0.0.4 through 0.1.0 allows remote attackers to read arbitrary files via a ".." (dot dot) in an HTTP request.

Published: Dec 31, 2002 Modified: Jun 16, 2026

CVSS Metrics

Affected Products (4)

Vendor Product Version
sws sws_simple_web_server 0.0.3
sws sws_simple_web_server 0.0.4
sws sws_simple_web_server 0.1.0
sws sws_simple_web_server 0.1.1

GitHub Security Advisory GHSA-m75v-8wm5-29r8

Directory traversal vulnerability in Simple Web Server (SWS) 0.0.4 through 0.1.0 allows remote...

Risk Scores

CVSS Score 5.0 / 10
EPSS Score 17.77%

Top 3% most likely to be exploited

Threat Score 25.3 / 100

Data Sources

NVD EPSS GitHub