Lucene search
+L

298 matches found

Github Security Blog
Github Security Blog
•added 2021/05/18 1:52 a.m.•89 views

Path traversal in rollup-plugin-serve

Path traversal in npm package rollup-plugin-serve before version 1.0.2. There is no path sanitization in readFile operation...

9.8CVSS9AI score0.01474EPSS
SaveExploits0References5Affected Software1
OSV
OSV
•added 2021/05/18 1:52 a.m.•41 views

GHSA-4J46-MP85-MV8C Path traversal in rollup-plugin-serve

Path traversal in npm package rollup-plugin-serve before version 1.0.2. There is no path sanitization in readFile operation...

9.8CVSS5.9AI score0.01474EPSS
SaveExploits0References4
vulnersOsv
vulnersOsv
•added 2021/05/18 1:52 a.m.•4 views

rollup.config.flow (4.0.0), tslib-cli (>=1.0.0, <=5.4.1) potentially affected by CVE-2020-7684 via rollup-plugin-serve (1.0.1)

rollup-plugin-serve NPM version 1.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on rollup-plugin-serve and may be impacted: - rollup.config.flow 4.0.0 - tslib-cli =1.0.0, =5.4.1 Source cves: CVE-2020-7684 Source advisory: OSV:GHSA-4J46-MP85-MV8C...

9.8CVSS8.6AI score0.01474EPSS
SaveExploits0
CNVD
CNVD
•added 2020/08/05 12:00 a.m.•15 views

rollup-plugin-serve path traversal vulnerability

rollup-plugin-serve is a module bundler package for JavaScript. A security vulnerability exists in the readFile operation of the 'readFileFromContentBase' function in rollup-plugin-server, which stems from the program's failure to clean up paths. No details of the vulnerability are available at...

7.5CVSS6.9AI score0.01768EPSS
SaveExploits1References1
Github Security Blog
Github Security Blog
•added 2020/07/29 6:07 p.m.•51 views

Directory traversal in rollup-plugin-server

This affects all versions of package rollup-plugin-dev-server. There is no path sanitization in readFile operation inside the readFileFromContentBase function...

7.5CVSS7.3AI score0.01768EPSS
SaveExploits1References3Affected Software1
OSV
OSV
•added 2020/07/29 6:07 p.m.•47 views

GHSA-VR98-27QJ-3C8Q Directory traversal in rollup-plugin-server

This affects all versions of package rollup-plugin-dev-server. There is no path sanitization in readFile operation inside the readFileFromContentBase function...

7.5CVSS5.9AI score0.01768EPSS
SaveExploits1References2
Github Security Blog
Github Security Blog
•added 2020/07/29 6:07 p.m.•61 views

Directory traversal in rollup-plugin-server

This affects all versions of package rollup-plugin-server. There is no path sanitization in readFile operation performed inside the readFileFromContentBase function...

7.5CVSS3.9AI score0.01768EPSS
SaveExploits1References3Affected Software1
OSV
OSV
•added 2020/07/29 6:07 p.m.•47 views

GHSA-34GH-3CWV-WVP2 Directory traversal in rollup-plugin-server

This affects all versions of package rollup-plugin-server. There is no path sanitization in readFile operation performed inside the readFileFromContentBase function...

7.5CVSS5.9AI score0.01768EPSS
SaveExploits1References2
CNVD
CNVD
•added 2020/07/29 12:00 a.m.•18 views

rollup-plugin-serve path traversal vulnerability

rollup-plugin-serve is a module bundler package for JavaScript. A path traversal vulnerability exists in rollup-plugin-serve, which stems from a failure to clear a path when the program performs a readFile operation. No details of the vulnerability are available at this time...

9.8CVSS6.9AI score0.01474EPSS
SaveExploits0References1
CNVD
CNVD
•added 2020/07/28 12:00 a.m.•13 views

rollup-plugin-dev-server path traversal vulnerability

rollup-plugin-dev-server is a plugin summary package. A path traversal vulnerability exists in the readFile operation of the 'readFileFromContentBase' function in rollup-plugin-dev-server all versions, which stems from the program's failure to clean up paths, and can be exploited by an attacker t...

7.5CVSS7.1AI score0.01768EPSS
SaveExploits1References1
Veracode
Veracode
•added 2020/07/27 3:02 a.m.•25 views

Path Traversal

rollup-plugin-server is vulnerable to path traversal attack. The vulnerability exists due to a lack of proper handling of user-provided path parameters in the readFile operation performed inside the readFileFromContentBase function, allowing an attacker to access arbitrary system files using...

7.5CVSS4.4AI score0.01768EPSS
SaveExploits1References2Affected Software1
NVD
NVD
•added 2020/07/25 9:15 a.m.•35 views

CVE-2020-7686

This affects all versions of package rollup-plugin-dev-server. There is no path sanitization in readFile operation inside the readFileFromContentBase function...

7.5CVSS7.5AI score0.01768EPSS
SaveExploits1References1
NVD
NVD
•added 2020/07/25 9:15 a.m.•32 views

CVE-2020-7683

This affects all versions of package rollup-plugin-server. There is no path sanitization in readFile operation performed inside the readFileFromContentBase function...

7.5CVSS7.5AI score0.01768EPSS
SaveExploits1References1
Prion
Prion
•added 2020/07/25 9:15 a.m.•25 views

Path traversal

This affects all versions of package rollup-plugin-server. There is no path sanitization in readFile operation performed inside the readFileFromContentBase function...

5CVSS7.5AI score0.01768EPSS
SaveExploits1References1
Prion
Prion
•added 2020/07/25 9:15 a.m.•22 views

Path traversal

This affects all versions of package rollup-plugin-dev-server. There is no path sanitization in readFile operation inside the readFileFromContentBase function...

5CVSS7.5AI score0.01768EPSS
SaveExploits1References1
Mend
Mend
•added 2020/07/25 8:40 a.m.•2 views

CVE-2020-7686

This affects all versions of package rollup-plugin-dev-server. There is no path sanitization in readFile operation inside the readFileFromContentBase function...

8.7CVSS0.01768EPSS
SaveExploits1References1
Cvelist
Cvelist
•added 2020/07/25 8:40 a.m.•47 views

CVE-2020-7686 Directory Traversal

This affects all versions of package rollup-plugin-dev-server. There is no path sanitization in readFile operation inside the readFileFromContentBase function...

7.5CVSS7.5AI score0.01768EPSS
SaveExploits1References1
attackerkb
attackerkb
•added 2020/07/25 8:39 a.m.•8 views

CVE-2020-7686

This affects all versions of package rollup-plugin-dev-server. There is no path sanitization in readFile operation inside the readFileFromContentBase function...

7.5CVSS7.3AI score0.01768EPSS
SaveExploits1References2
Mend
Mend
•added 2020/07/25 8:35 a.m.•2 views

CVE-2020-7683

This affects all versions of package rollup-plugin-server. There is no path sanitization in readFile operation performed inside the readFileFromContentBase function...

8.7CVSS0.01768EPSS
SaveExploits1References1
Cvelist
Cvelist
•added 2020/07/25 8:35 a.m.•41 views

CVE-2020-7683 Directory Traversal

This affects all versions of package rollup-plugin-server. There is no path sanitization in readFile operation performed inside the readFileFromContentBase function...

7.5CVSS7.5AI score0.01768EPSS
SaveExploits1References1
Rows per page
Query Builder