EUVD-2022-7270

🗓️ 03 Oct 2025 20:07:09Reported by EUVDType

Vulnerability in static-dev-server affects all versions due to improper path handling to root directory.

Reporter	Title	Published	Views	Family All 13
Circl	CVE-2022-25848	29 Nov 202220:29	–	circl
CNNVD	static-dev-server 路径遍历漏洞	29 Nov 202200:00	–	cnnvd
CNVD	static-dev-server directory traversal vulnerability	1 Dec 202200:00	–	cnvd
CVE	CVE-2022-25848	29 Nov 202216:50	–	cve
Cvelist	CVE-2022-25848 Directory Traversal	29 Nov 202216:50	–	cvelist
Github Security Blog	static-dev-server vulnerable to path traversal	29 Nov 202218:30	–	github
NVD	CVE-2022-25848	29 Nov 202217:15	–	nvd
OSV	GHSA-7FXM-C848-89Q8 static-dev-server vulnerable to path traversal	29 Nov 202218:30	–	osv
Prion	Directory traversal	29 Nov 202217:15	–	prion
Positive Technologies	PT-2022-17565 · Unknown · Static-Dev-Server	29 Nov 202200:00	–	ptsecurity

[
  {
    "enisaIdVendor": [
      {
        "id": "24ea8ebe-0d7a-3fdf-ad46-6268ea891628",
        "vendor": {
          "name": "n/a"
        }
      }
    ],
    "enisaIdProduct": [
      {
        "id": "d51ea076-c432-340f-99d9-f4143a07fcd0",
        "product": {
          "name": "static-dev-server"
        },
        "product_version": "0 <unspecified"
      }
    ]
  }
]

Source	Link
nvd	www.nvd.nist.gov/vuln/detail/CVE-2022-25848
gist	www.gist.github.com/lirantal/5550bcd0bdf92c1b56fbb20e141fe5bd
github	www.github.com/etoah/static-dev-server
security	www.security.snyk.io/vuln/SNYK-JS-STATICDEVSERVER-3149917

03 Oct 2025 20:07Current

7.5High risk

Vulners AI Score7.5

CVSS 3.17.5

EPSS0.00469

SSVC

static-dev-server vulnerability path handling root directory