Description
mod_cgi in lighttpd 1.4.18 sends the source code of CGI scripts instead of a 500 error when a fork failure occurs, which might allow remote attackers to obtain sensitive information.
Remediation
References
Related Vulnerabilities
WordPress Plugin Juiz Social Post Sharer Multiple Cross-Site Scripting Vulnerabilities (1.3.3.7)
WordPress Plugin YITH Advanced Refund System for WooCommerce Security Bypass (1.0.10)
Jenkins Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2017-1000362)
WordPress Plugin WP FullCalendar Security Bypass (1.4.1)
WordPress Plugin User Profile Picture Information Disclosure (2.4.0)