CVE-2014-10066

CVE-2014-10066 describes a directory traversal vulnerability in versions of the fancy-server static file server module prior to 0.1.4. An unauthenticated attacker can exploit this flaw by providing specially crafted input, such as "../", to read arbitrary files outside the intended served directory. This vulnerability carries a CVSS score of 7.5 (HIGH), indicating a high impact on confidentiality with low attack complexity and no user interaction required. There is no evidence of active exploitation, publicly available exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this CVE.