Lucene search

K
prionPRIOn knowledge basePRION:CVE-2015-1164
HistoryJan 21, 2015 - 3:28 p.m.

Open redirect

2015-01-2115:28:00
PRIOn knowledge base
www.prio-n.com
5

7 High

AI Score

Confidence

Low

0.003 Low

EPSS

Percentile

71.8%

Open redirect vulnerability in the serve-static plugin before 1.7.2 for Node.js, when mounted at the root, allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a // (slash slash) followed by a domain in the PATH_INFO to the default URI.

CPENameOperatorVersion
serve-staticle1.7.1

7 High

AI Score

Confidence

Low

0.003 Low

EPSS

Percentile

71.8%