HIGH
lukejacksonn
CVE published 2026-10-12
CVE-2021-48011
CVE-2021-48011 Servor 1.0.0 through 4.0.2 Unauthenticated Path Traversal via URL-Encoded Dot Segments allows unauthenticated remote attackers to escape the served root by sending URL-encoded dot segments, potentially leading to arbitrary file access and directory listing outside the root directory. Defenders should assess exposure and prioritize remediation, especially in environments where unauthenticate [truncated]