Directory traversal

2023-05-1005:15:00

PRIOn knowledge base

www.prio-n.com

vulnerable

improper input sanitization

requestfile function

nvd

0.001 Low

EPSS

Percentile

38.1%

JSON

All versions of the package m.static are vulnerable to Directory Traversal due to improper input sanitization of the path being requested via the requestFile function.

CPENameOperatorVersion
m.staticle2.2.0

CPE	Name	Operator	Version
	m.static	le	2.2.0

References

gist.github.com/lirantal/dcb32c11ce87f5aafd2282b90b4dc998

security.snyk.io/vuln/SNYK-JS-MSTATIC-3244915

0.001 Low

EPSS

Percentile

38.1%

JSON

Related for PRION:CVE-2023-26126