high8.1
CVE-2025-41368
Problem in the Small HTTP Server v3.06.36 service.
Impact
Problem in the Small HTTP Server v3.06.36 service. An authenticated path traversal vulnerability in '/' allows remote users to bypass the intended restrictions of SecurityManager and display any file if they have the appropriate permissions outside the document root configured on the server.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Smallsrv | Small Http Server | from 3.06.36 before 3.06.38 |