CVE-2002-1390: Geneweb

Medium severity, CVSS 5.0. EPSS: 1.4% chance of exploitation in the next 30 days.

The daemon for GeneWeb before 4.09 does not properly handle requested paths, which allows remote attackers to read arbitrary files via a crafted URL.

Affected products

• Geneweb Geneweb: version 4.05 only; version 4.06 only; version 4.07 only; version 4.08 only

Published 2003-01-17. Last modified 2026-06-16.