CVE-2022-25848

creationtimestamp| type| source ---|---|--- 2022-11-29 20:29:01+00:00| seen| https://t.me/cibsecurity/53665 2025-04-24 18:06:51+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/13302...

CVE-2022-25848

This affects all versions of package static-dev-server. This is because when paths from users to the root directory are joined, the assets for the path accessed are relative to that of the root directory...

CVE-2022-25848 Directory Traversal

This affects all versions of package static-dev-server. This is because when paths from users to the root directory are joined, the assets for the path accessed are relative to that of the root directory...

CVE-2022-25848

CVE-2022-25848 affects all versions of the npm package static-dev-server. The root cause is a directory traversal vulnerability caused by how paths from users to the root directory are joined, causing assets to be resolved relative to the root. This can enable access to arbitrary files on the und...

CVE-2022-25848 Directory Traversal

This affects all versions of package static-dev-server. This is because when paths from users to the root directory are joined, the assets for the path accessed are relative to that of the root directory...