Servers and applications
CVE-2010-2263
nginx 0.8 before 0.8.40 and 0.7 before 0.7.66, when running on Windows, allows remote attackers to obtain source code or unparsed content of arbitrary files under the web document root by appending ::$DATA to the URI.
- Severity
- Medium 5.0
- Published
- 15 Jun 2010
- Last changed
- 16 Jun 2026
- Added to UpHeron
- 21 Oct 2026
- Fixed in
- 0.7.66
- Exploit chance
- 72% in the next 30 daysHigher than 99% of CVEs. EPSS by FIRST, 12 Nov 2026
- Weakness
- Information exposure (CWE-200)
- Attack
- Over the network · No login needed
- Attacker can
- Read some data
- CVSS vector
AV:N/AC:L/Au:N/C:P/I:N/A:N- Sources
- NVD
Affected software
| Software | Affected versions |
|---|---|
nginxServers and applications · cpe:a:f5:nginx |
|