Unknown · Tiny Server · CVE-2012-5335
**Name of the Vulnerable Software and Affected Versions**
Tiny Server version 1.1.5
**Description**
A directory traversal issue allows remote authenticated users to read arbitrary files by including a .. (dot dot) in the URI of an HTTP request.
**Recommendations**
For Tiny Server version 1.1.5, update to a version that fixes this issue, as using .. (dot dot) in the URI allows unauthorized file access. At the moment, there is no information about a newer version that contains a fix for this vulnerability.