AN HTTP 1.41e allows remote attackers to obtain the root web server path via an HTTP request with a long argument to a script, which leaks the path in an error message.
Affected Software
| Name |
Vendor |
Start Version |
End Version |
| An-http |
An |
1.41e (including) |
1.41e (including) |
References