CVE-2004-1838: Xweb

Medium severity, CVSS 5.0. EPSS: 3.7% chance of exploitation in the next 30 days.

Directory traversal vulnerability in xweb 1.0 allows remote attackers to download arbitrary files via a .. (dot dot) in the URL.

Affected products

• Xweb Xweb: version 1.0 only

Published 2004-03-22. Last modified 2026-06-16.