EUVD-2022-0616

🗓️ 03 Oct 2025 20:07:09Reported by EUVDType

All versions of http-server-node are vulnerable to Directory Traversal via --path-as-is feature

Reporter	Title	Published	Views	Family All 14
Circl	CVE-2021-23797	17 Dec 202122:37	–	circl
CNNVD	http-server-node 路径遍历漏洞	17 Dec 202100:00	–	cnnvd
CVE	CVE-2021-23797	17 Dec 202120:05	–	cve
Cvelist	CVE-2021-23797 Directory Traversal	17 Dec 202120:05	–	cvelist
Debian CVE	CVE-2021-23797	17 Dec 202120:05	–	debiancve
Github Security Blog	Path Traversal in http-server-node	5 Jan 202215:02	–	github
NVD	CVE-2021-23797	17 Dec 202120:15	–	nvd
OSV	GHSA-HJ3M-V758-JWX5 Path Traversal in http-server-node	5 Jan 202215:02	–	osv
OSV	UBUNTU-CVE-2021-23797	17 Dec 202120:15	–	osv
Prion	Directory traversal	17 Dec 202120:15	–	prion

[
  {
    "enisaIdVendor": [
      {
        "id": "024030e0-b701-3c02-b40e-623f064eb91f",
        "vendor": {
          "name": "n/a"
        }
      }
    ]
  }
]

Source	Link
nvd	www.nvd.nist.gov/vuln/detail/CVE-2021-23797
github	www.github.com/yan-loong/http-server
snyk	www.snyk.io/vuln/SNYK-JS-HTTPSERVERNODE-1727656

03 Oct 2025 20:07Current

9.3High risk

Vulners AI Score9.3

CVSS 3.17.5 - 9.8

CVSS 27.5

EPSS0.00641