CVE-2010-2333

CVE-2010-2333 describes a source code disclosure vulnerability in LiteSpeed Web Server versions 4.0.x prior to 4.0.15. An attacker can exploit this by appending a null byte and a .txt extension to an HTTP request, allowing them to read the source code of scripts. This vulnerability has a CVSS score of 5.0, indicating a medium severity, as it is easily exploitable over the network with no authentication required, leading to a potential compromise of confidentiality. While not listed on CISA's KEV catalog, exploit modules are publicly available in Metasploit and ExploitDB, suggesting a higher likelihood of exploitation despite limited community discussion or media coverage.