ACME mini_httpd arbitrary file read

Description
  • ACME mini_httpd is a minimalistic web server designed for optimal performance, high security, and as little use of system resources as possible.

    ACME mini_httpd before version 1.30 lets remote users read arbitrary files via a logical bug.
Remediation
  • Upgrade to the latest version of ACME mini_httpd. This issue was fixed in version 1.30.
References