| Package | Affected versions | Patched versions |
|---|---|---|
| lighttpd | < 1.4.35 | 1.4.35 |
Multiple directory traversal vulnerabilities in (1) mod_evhost and (2) mod_simple_vhost in lighttpd before 1.4.35 allow remote attackers to read arbitrary files via a .. (dot dot) in the host name, related to request_check_hostname.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free