CVE-2014-9707

CVE-2014-9707 describes a directory traversal vulnerability in EmbedThis GoAhead versions 3.0.0 through 3.4.1, stemming from improper handling of path segments beginning with a dot. This flaw allows unauthenticated remote attackers to potentially access sensitive files, cause a denial of service through a heap-based buffer overflow, or execute arbitrary code. Rated with a CVSS score of 7.5, indicating high severity, the attack is network-based and requires low attack complexity. While not listed on CISA's KEV catalog, a Metasploit module exists for directory traversal, and despite its age, it has a high FAUCET Risk Score, though it lacks significant community discussion or media coverage.