CVE-2010-2333: Litespeedtech LiteSpeed Web Server

Medium severity, CVSS 5.0. EPSS: 60.2% chance of exploitation in the next 30 days.

LiteSpeed Technologies LiteSpeed Web Server 4.0.x before 4.0.15 allows remote attackers to read the source code of scripts via an HTTP request with a null byte followed by a .txt file extension.

Affected products

• Litespeedtech LiteSpeed Web Server: version 4.0 only; version 4.0.1 only; version 4.0.2 only; version 4.0.3 only; version 4.0.4 only; version 4.0.5 only; …

Published 2010-06-18. Last modified 2026-06-16.