Lucene search
K

Node.js third-party modules: [serve] Directory listing and File access even when they have been set to be ignored (using dot-slash)

🗓️ 28 Mar 2018 10:35:21Reported by tungpunType 
hackerone
 hackerone
🔗 hackerone.com👁 32 Views

Node.js third-party modules vulnerability report: "serve" module allows unauthorized file access and directory listin

Related
ReporterTitlePublishedViews
Family
CVE
CVE-2019-5415
17 Mar 201919:28
cve
Cvelist
CVE-2019-5415
17 Mar 201919:28
cvelist
EUVD
EUVD-2019-0391
7 Oct 202500:30
euvd
Github Security Blog
Path Traversal in serve
25 Mar 201918:03
github
Node.js
Path Traversal
19 Jun 201920:10
nodejs
NVD
CVE-2019-5415
21 Mar 201916:01
nvd
OSV
GHSA-V588-QCP3-JV46 Path Traversal in serve
25 Mar 201918:03
osv
Prion
Design/Logic Flaw
21 Mar 201916:01
prion
Veracode
Directory Traversal
22 Mar 201913:09
veracode

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation