The Administration console for Abyss Web Server 1.0.3 allows remote attackers to read files without providing login credentials via an HTTP request to a target file that ends in a + character.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Abyss_web_server | Aprelium_technologies | 1.0 (including) | 1.0 (including) |
| Abyss_web_server | Aprelium_technologies | 1.0.3 (including) | 1.0.3 (including) |