Lucene search

K
osvGoogleOSV:GHSA-5RC4-8QQH-VQ7F
HistoryAug 09, 2021 - 10:24 p.m.

vercel/serve allows access to restricted files if filename is URL encoded.

2021-08-0922:24:26
Google
osv.dev
12
vercel
serve module
restricted files
url encoding
ignored files
software

EPSS

0.001

Percentile

47.7%

serve node module suffers from Improper Handling of URL Encoding by permitting access to ignored files if a filename is URL encoded.

EPSS

0.001

Percentile

47.7%

Related for OSV:GHSA-5RC4-8QQH-VQ7F