Lucene search

K
osvGoogleOSV:GHSA-4448-RC82-FCR7
HistorySep 22, 2021 - 6:40 p.m.

Path Traversal in serve-here.js

2021-09-2218:40:57
Google
osv.dev
7
serve-here.js
path traversal
vulnerability
sanitize urls
relative paths
security flaw

EPSS

0.001

Percentile

48.3%

Versions of serve-here.js prior to 1.2.0 are vulnerable to path traversal. The package fails to sanitize URLs, allowing attackers to access server files outside of the served folder using relative paths.

EPSS

0.001

Percentile

48.3%