Directory traversal

2018-05-3120:29:00

PRIOn knowledge base

www.prio-n.com

6.9 Medium

AI Score

Confidence

Low

0.002 Low

EPSS

Percentile

54.4%

JSON

Versions less than 0.1.4 of the static file server module fancy-server are vulnerable to directory traversal. An attacker can provide input such as ../ to read files outside of the served directory.

CPENameOperatorVersion
fancy-serverlt0.1.4

CPE	Name	Operator	Version
	fancy-server	lt	0.1.4

References

nodesecurity.io/advisories/9