CVE-2010-2333

no score yetEPSS 60%

litespeedtech litespeed web server: no CVSS score yet. EPSS 60% chance of exploitation in the next 30 days.

LiteSpeed Technologies LiteSpeed Web Server 4.0.x before 4.0.15 allows remote attackers to read the source code of scripts via an HTTP request with a null byte followed by a .txt file extension.

EPSS: 60% chance of exploitation in the next 30 days; higher than 99% of CVEs (scores of 2026-10-31)
CWE: CWE-200
Published: 2010-06-18
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

litespeedtech:litespeed_web_server

References

http://osvdb.org/65476
http://seclists.org/fulldisclosure/2010/Jun/288
http://secunia.com/advisories/40128
http://www.exploit-db.com/exploits/13850
http://www.litespeedtech.com/latest/litespeed-web-server-4.0.15-released.html

Check your stack JSON