Unrated severityNVD Advisory· Published Nov 25, 2013· Updated Apr 29, 2026

CVE-2013-3922

Description

Directory traversal vulnerability in Gummy Bear Studios FTP Drive + HTTP Server 1.0.4 and earlier allows remote attackers to read arbitrary files via a ..%2f (encoded dot dot slash) in a GET request.

Affected products

Gummybearstudios/Ftp Drive \+ HTTP Server
cpe:2.3:a:gummybearstudios:ftp_drive_\+_http_server:*:*:*:*:*:*:*:*
Range: <=1.0.4

Patches

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

www.trustwave.com/spiderlabs/advisories/TWSL2013-032.txtnvdExploit
exchange.xforce.ibmcloud.com/vulnerabilities/89161nvd

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000