---
id: 3774
title: "[CVE-2021-40668] Path Traversal in slowscript.httpfileserver"
cve: CVE-2021-40668
source_domain: projectblack.io
source_url: "https://projectblack.io/blog/path-traversal-in-slowscript-httpfileserver/"
published_at: "2023-01-01T10:57:00Z"
tags: ["android", "path-traversal", "mobile-security", "vulnerability", "cve-2021-40668", "http-file-server"]
phying_url: "https://phying.com/item/3774"
lang: en
---

# [CVE-2021-40668] Path Traversal in slowscript.httpfileserver

## Summary

CVE-2021-40668: the slowscript HTTP File Server Android app (1.4.1 and earlier) suffers path traversal despite its root-directory setting, allowing arbitrary directory listing, file read and write.

## Intelligence Metadata

- **Sources:** projectblack.io
- **CVE:** CVE-2021-40668
- **Published:** 2023-01-01T10:57:00Z
- **Original:** https://projectblack.io/blog/path-traversal-in-slowscript-httpfileserver/
- **Phying News:** https://phying.com/item/3774