Johan Bergström

**Name of the Vulnerable Software and Affected Versions** lighttpd version 1.4.18 **Description** The issue allows remote attackers to obtain sensitive information by sending the source code of CGI scripts instead of a 500 error when a fork failure occurs in mod cgi. **Recommendations** For lighttpd version 1.4.18, consider updating to a newer version that addresses this issue, as the current version may disclose sensitive information due to the handling of fork failures in mod cgi. At the moment, there is no information about a newer version that contains a fix for this vulnerability.