5 matches found
CVE-2023-26126
All versions of the package m.static are vulnerable to Directory Traversal due to improper input sanitization of the path being requested via the requestFile function...
7.5CVSS6.8AI score0.00994EPSS
SaveExploits1References1
CVE-2023-26126
All versions of the package m.static are vulnerable to Directory Traversal due to improper input sanitization of the path being requested via the requestFile function...
7.5CVSS7.5AI score0.00994EPSS
SaveExploits1References2
CVE-2023-26126
CVE-2023-26126 concerns the npm package m.static , where all versions are vulnerable to a Directory Traversal due to improper input sanitization in the requestFile function. The published descriptions consistently state that path inputs can escape the intended directory, enabling access to arbitr...
7.5CVSS5.3AI score0.00994EPSS
SaveExploits1References2Affected Software1
20