Lucene search
GoogleOSV:GHSA-V588-QCP3-JV46HistoryMar 25, 2019 - 6:03 p.m.
Path Traversal in serve
2019-03-2518:03:58
Google
osv.dev
8
EPSS
0.006
Percentile
78.3%
Versions of serve prior to 7.0.1 are vulnerable to Path Traversal. Explicitly ignored folders can be accessed through if the path contains a /./, which allows attackers to access hidden folders and files.
Recommendation
Upgrade to version 7.0.1 or later.
Related
github
github
Path Traversal in serve
2019-03-25 18:03:58
prion
prion
Design/Logic Flaw
2019-03-21 16:01:00
hackerone
hackerone
veracode
veracode
Directory Traversal
2019-03-22 13:09:22
nodejs
nodejs
Path Traversal
2019-06-19 20:10:24
cve
cve
CVE-2019-5415
2019-03-21 16:01:05
osv
osv
CVE-2019-5415
2019-03-21 16:01:05
cvelist
cvelist
CVE-2019-5415
2019-03-17 19:28:37
nvd
nvd
CVE-2019-5415
2019-03-21 16:01:05