Lucene search

CVE-2022-25936

🗓️ 30 Jan 2023 05:10:15Reported by snykType

Versions of the package servst before 2.0.3 are vulnerable to Directory Traversal due to improper sanitization of the filePath variable

AI Insights are available for you today

Leverage the power of AI to quickly understand vulnerabilities, impacts, and exploitability

Reporter	Title	Published	Views	Family All 9
RedhatCVE	CVE-2022-25936	6 Feb 202502:12	–	redhatcve
Veracode	Directory Traversal	3 Feb 202315:52	–	veracode
NVD	CVE-2022-25936	30 Jan 202305:15	–	nvd
OSV	Servst vulnerable to Path Traversal	30 Jan 202306:30	–	osv
OSV	CVE-2022-25936	30 Jan 202305:15	–	osv
Prion	Directory traversal	30 Jan 202305:15	–	prion
Vulnrichment	CVE-2022-25936	30 Jan 202305:00	–	vulnrichment
Cvelist	CVE-2022-25936	30 Jan 202305:00	–	cvelist
Github Security Blog	Servst vulnerable to Path Traversal	30 Jan 202306:30	–	github

Nvd

Node

servst_project servstRange<2.0.3node.js

[
  {
    "product": "servst",
    "versions": [
      {
        "version": "0",
        "lessThan": "2.0.3",
        "status": "affected",
        "versionType": "semver"
      }
    ],
    "vendor": "n/a"
  }
]

Source	Link
gist	www.gist.github.com/lirantal/691d02d607753d54856f9335f9a1692f
security	www.security.snyk.io/vuln/SNYK-JS-SERVST-3244896
github	www.github.com/andrepolischuk/servst/commit/f7cae5d2d7c64c86bc512e1e50614240396ef114

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

30 Jan 2023 05:15Current

7.5High risk

Vulners AI Score7.5

CVSS37.5

EPSS0.0036

SSVC

CWE-22