CVE-2013-3922: Gummybearstudios FTP Drive + HTTP Server

High severity, CVSS 7.8. EPSS: 2.5% chance of exploitation in the next 30 days.

Directory traversal vulnerability in Gummy Bear Studios FTP Drive + HTTP Server 1.0.4 and earlier allows remote attackers to read arbitrary files via a ..%2f (encoded dot dot slash) in a GET request.

Affected products

• Gummybearstudios FTP Drive + HTTP Server: up to and including 1.0.4

Published 2013-11-25. Last modified 2026-06-16.