Lucene search
GoogleOSV:GHSA-M273-WWFV-H6JPHistoryAug 31, 2020 - 10:44 p.m.
Directory Traversal in fancy-server
2020-08-3122:44:33
Google
osv.dev
6
0.002 Low
EPSS
Percentile
54.4%
Versions 0.1.4 and earlier of fancy-server are vulnerable to a directory traversal attack.
Standard attack vectors such as ../ will allow an attacker to read files outside of the served directory.
Recommendation
Upgrade to version 0.1.4 or greater.
| CPE | Name | Operator | Version |
|---|---|---|---|
| fancy-server | lt | 0.1.4 |
Related
cve
cve
CVE-2014-10066
2018-05-31 20:29:00
nvd
nvd
CVE-2014-10066
2018-05-31 20:29:00
prion
prion
Directory traversal
2018-05-31 20:29:00
cvelist
cvelist
CVE-2014-10066
2018-04-26 00:00:00
nodejs
nodejs
Directory Traversal
2015-10-17 19:41:46
github
github
Directory Traversal in fancy-server
2020-08-31 22:44:33