CVE-2018-16478

CVE-2018-16478 describes a Path Traversal vulnerability in simplehttpserver versions 0.2.1 and earlier, allowing an attacker to list arbitrary files outside the web root. This medium-severity vulnerability (CVSS 5.3) is easily exploitable over the network with low attack complexity, requiring no user interaction or privileges, and primarily impacts confidentiality by enabling information disclosure. While the vulnerability has a low EPSS score and FAUCET Risk Score, indicating a low probability of exploitation, there is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage.