CVE-2010-2263

CVE-2010-2263 is a source code disclosure vulnerability affecting Nginx versions 0.8 prior to 0.8.40 and 0.7 prior to 0.7.66 when running on Windows. An unauthenticated remote attacker can exploit this by appending "::$DATA" to a URI, allowing them to obtain the source code or unparsed content of arbitrary files within the web document root. This vulnerability has a CVSS score of 5.0, indicating a medium severity, with low attack complexity and potential for information disclosure (C:P). While not listed in CISA's KEV catalog, exploit modules exist in Metasploit and ExploitDB, suggesting readily available exploitation tools. Despite the availability of exploits, there is no evidence of active exploitation, and community discussion and media coverage are minimal.