Lucene search

K
nodejs_ bl4deNODEJS:595
HistoryApr 24, 2018 - 4:17 p.m.

Cross-Site Scripting

2018-04-2416:17:26
_ bl4de
www.npmjs.com
19

EPSS

0.001

Percentile

37.8%

Overview

Versions of simple-server before 1.1.0 are vulnerable to stored cross-site scripting (XSS). This is exploitable if an attacker can control a filename on the server.

Recommendation

Update to version 1.1.0 or later.

References