Sambar web server before 5.2 beta 1 allows remote attackers to obtain source code of server-side scripts, or cause a denial of service (resource exhaustion) via DOS devices, using a URL that ends with a space and a null character.
| Software | From | Fixed in |
|---|---|---|
| sambar / sambar_server | 5.1 | 5.1.x |