Description
The is_cgi method in CGIHTTPServer.py in the CGIHTTPServer module in Python 2.5, 2.6, and 3.0 allows remote attackers to read script source code via an HTTP GET request that lacks a / (slash) character at the beginning of the URI.
Remediation
References
Related Vulnerabilities
WordPress Plugin Calculated Fields Form Cross-Site Scripting (1.0.353)
MediaWiki Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2010-2787)
WordPress Plugin Photo Gallery by Supsystic Multiple Vulnerabilities (1.8.5)
Artifactory Unrestricted Upload of File with Dangerous Type Vulnerability (CVE-2016-10036)