Path Traversal in serve

🗓️ 25 Mar 2019 18:58:03Reported by GitHub Advisory DatabaseType

Serve software Path Traversal vulnerability

Reporter	Title	Published	Views	Family All 9
OSV	Path Traversal in serve	25 Mar 201918:03	–	osv
OSV	CVE-2019-5415	21 Mar 201916:01	–	osv
Hacker One	Node.js third-party modules: [serve] Directory listing and File access even when they have been set to be ignored (using dot-slash)	28 Mar 201810:35	–	hackerone
Veracode	Directory Traversal	22 Mar 201913:09	–	veracode
Node.js	Path Traversal	19 Jun 201920:10	–	nodejs
CVE	CVE-2019-5415	21 Mar 201916:01	–	cve
Prion	Design/Logic Flaw	21 Mar 201916:01	–	prion
Cvelist	CVE-2019-5415	17 Mar 201919:28	–	cvelist
NVD	CVE-2019-5415	21 Mar 201916:01	–	nvd

Vulners

Node

-serveRange<7.1.3

Source	Link
nvd	www.nvd.nist.gov/vuln/detail/CVE-2019-5415
hackerone	www.hackerone.com/reports/330724
github	www.github.com/advisories/GHSA-v588-qcp3-jv46
npmjs	www.npmjs.com/advisories/1010

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

25 Mar 2019 18:03Current

4.4Medium risk

Vulners AI Score4.4

CVSS25

CVSS37.5

EPSS0.009

CWE-548