CVE-2023-46919: Fedirtsapana Simple HTTP Server

Medium severity, CVSS 6.3. EPSS: 0.1% chance of exploitation in the next 30 days.

Phlox com.phlox.simpleserver (aka Simple HTTP Server) 1.8 and com.phlox.simpleserver.plus (aka Simple HTTP Server PLUS) 1.8.1-plus have a hardcoded aKySWb2jjrr4dzkYXczKRt7K (AES) encryption key. An attacker with physical access to the application's source code or binary can extract this key & use it decrypt the TLS secret.

Affected products

• Fedirtsapana Simple HTTP Server: version 1.8 only
• Fedirtsapana Simple HTTP Server Plus: version 1.8.1-plus only

Published 2023-12-27. Last modified 2026-06-17.