CVE-2012-5100

CVE-2012-5100 describes a directory traversal vulnerability in HServer version 0.1.1, allowing unauthenticated remote attackers to read arbitrary files. This flaw is due to improper handling of encoded directory traversal sequences in the PATH_INFO. With a CVSS score of 5.0, it presents a medium severity risk, enabling information disclosure without requiring authentication or complex attack methods. While not listed in CISA's KEV catalog, exploit code is publicly available via ExploitDB, though there is no evidence of active exploitation or significant community discussion.