CVE-2015-8235

CVE-2015-8235 describes a directory traversal vulnerability in Spiffy versions prior to 5.4, allowing an attacker to access arbitrary files and directories outside of the intended scope. With a CVSS score of 7.5 (HIGH), this vulnerability is easily exploitable over the network with low attack complexity, potentially leading to high confidentiality impact. While the EPSS score is low and there is no evidence of active exploitation, nor publicly available exploit code in Metasploit, Nuclei, or ExploitDB, its presence in the FAUCET Risk Score at 62/100 indicates a moderate risk. There is also no community discussion or media coverage surrounding this CVE.