CVE-2004-2214 Mbedthis AppWeb HTTP server before 1.1.3 allows remote attackers to bypass access restrictions via a URI with mixed case characters.
CriticalCVSS 9.8
EPSS 2.7%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Mbedthis AppWeb HTTP server before 1.1.3 allows remote attackers to bypass access restrictions via a URI with mixed case characters.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| mbedthis appweb http server | < 1.1.3 | 1.1.3 |
References
- 12011 broken-link patch third-party-advisory vendor-advisory
- www.mbedthis.com broken-link
- 7391 broken-link patch vdb-entry
- 10673 broken-link patch third-party-advisory vdb-entry
- mbedthis-uri-gain-access(16638) third-party-advisory vdb-entry