CVE-2010-2333 - CVE House
Back to Database
Status published Medium CVE-2010-2333

LiteSpeed Technologies LiteSpeed Web Server 4.0.x before 4.0.15 allows remote...

Vulnerability Description

LiteSpeed Technologies LiteSpeed Web Server 4.0.x before 4.0.15 allows remote attackers to read the source code of scripts via an HTTP request with a null byte followed by a .txt file extension.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2010-2333

Credits & Attribution

No credits recorded in the NVD database.

References

More from litespeedtech

View All →
CVE-2025-54939
LiteSpeed QUIC (LSQUIC) Library before 4.3.1 has an lsquic_engine_packet_in memory...
Medium 5.3
CVE-2025-24947
A hash collision vulnerability (in the hash table used to...
Medium 5.3
CVE-2025-12450
LiteSpeed Cache <= 7.5.0.1 - Reflected Cross-Site Scripting
Medium 6.1
CVE-2024-9169
litespeed cache <= 6.4.1 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium 5.5
CVE-2024-3246
LiteSpeed Cache <= 6.2.0.1 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Medium 6.1

Affected Vendor

litespeedtech

View all reports →

Affected Software

litespeed web server
Vulnerable Versions:
4.0, 4.0.1, 4.0.2, 4.0.3, 4.0.4, 4.0.5, 4.0.6, 4.0.7, 4.0.8, 4.0.9, 4.0.10, 4.0.11, 4.0.12, 4.0.13, 4.0.14

Timeline

Official Publish: June 18th, 2010
Last Modified: August 7th, 2024
Added to House: July 19th, 2026

CVSS Vectors

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.