PT-2025-30580 · Httpdasm · Httpdasm

Published 2025-07-23 · Updated 2025-07-23 · CVE-2010-10012

Positive Technologies (AI Summary)

CVSS v4.0

8.7

High

Base vector

AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Name of the Vulnerable Software and Affected Versions httpdasm version 0.92

Description A path traversal issue exists in httpdasm that allows unauthenticated attackers to read arbitrary files on the host system. An attacker can escape the web root and access sensitive files outside of the intended directory by sending a specially crafted GET request containing a sequence of URL-encoded backslashes and directory traversal patterns.

Recommendations Update httpdasm to a newer version that contains a fix for this issue.

Fix

Path traversal

Weakness Enumeration

CWE-22

Related Identifiers

CVE-2010-10012

Affected Products

Httpdasm

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2010-10012 · Security Note
• https://vulncheck.com/advisories/httpasm-path-traversal · Note
• https://raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/auxiliary/scanner/http/httpdasm_directory_traversal.rb · Note
• https://japheth.de/httpdASM.html · Note
• https://t.me/CVEtracker/28487 · Telegram Post
• https://exploit-db.com/exploits/15861 · Note