Back

CVE-2004-1646

Directory traversal vulnerability in Xedus 1.0 allows remote attackers to read arbitrary files via a .. (dot dot) in the URL.

Published: Aug 30, 2004 Modified: Jun 16, 2026

CVSS Metrics

Affected Products (1)

Vendor Product Version
jerod_moemeka xedus 1.0

GitHub Security Advisory GHSA-vwp5-j5cp-r3jp

Directory traversal vulnerability in Xedus 1.0 allows remote attackers to read arbitrary files...

Risk Scores

CVSS Score 5.0 / 10
EPSS Score 7.14%

Top 6% most likely to be exploited

Threat Score 22.1 / 100

Data Sources

NVD EPSS GitHub