CVE-2004-2203

CVE-2004-2203 describes a vulnerability in Ansel versions 1.2 through 2.0, where insecure default permissions allow remote attackers to gain unauthorized access to web-readable directories. This vulnerability carries a CVSS score of 7.5, indicating high severity due to its network-based attack vector, low attack complexity, and potential for partial compromise of confidentiality, integrity, and availability. While there is no evidence of active exploitation or publicly available exploit code in Metasploit, Nuclei, or ExploitDB, the vulnerability has garnered significant community discussion with 10 mentions, suggesting awareness among security researchers.