Lucene search
+L

6 matches found

Mend
Mend
•added 2026/05/14 6:15 a.m.•0 views

WS-2019-0227

file-static-server all versions are vulnerable to path traversal because of insufficient input sanitization in URLs, attackers can access server files by using relative paths when fetching files...

8.7CVSS5.8AI score
SaveExploits0References1
Github Security Blog
Github Security Blog
•added 2020/09/03 4:49 p.m.•26 views

Path Traversal in file-static-server

All versions of file-static-server are vulnerable to Path Traversal. Due to insufficient input sanitization in URLs, attackers can access server files by using relative paths when fetching files. Recommendation No fix is currently available. Consider using an alternative module until a fix is mad...

4.7AI score
SaveExploits0References3Affected Software1
OSV
OSV
•added 2020/09/03 4:49 p.m.•15 views

GHSA-QJFH-XC44-RM9X Path Traversal in file-static-server

All versions of file-static-server are vulnerable to Path Traversal. Due to insufficient input sanitization in URLs, attackers can access server files by using relative paths when fetching files. Recommendation No fix is currently available. Consider using an alternative module until a fix is mad...

7AI score
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2020/09/03 12:00 a.m.•0 views

PT-2020-21462

Name of the Vulnerable Software and Affected Versions file-static-server versions all versions Description The issue is related to Path Traversal due to insufficient input sanitization in URLs. Attackers can access server files by using relative paths when fetching files. Recommendations For all...

5.8AI score
SaveExploits0References3
Veracode
Veracode
•added 2018/06/18 8:46 a.m.•13 views

Directory Traversal

file-static-server is vulnerable to directory traversal attacks. The attack is possible by requesting a url such as /..%2f..%2fetc/passwd to get sensitive information...

6.6AI score
SaveExploits0
Hacker One
Hacker One
•added 2018/01/30 11:37 p.m.•36 views

Node.js third-party modules: [file-static-server] Path Traversal allows to read content of arbitrary file on the server

Hi Guys, There is Path Traversal vulnerability in file-static-server module, which allows to read arbitrary file from the remote server. Module file-static-server no description provided https://www.npmjs.com/package/file-static-server version: 1.0.2 Stats 0 downloads in the last day 3 downloads ...

0.3AI score
SaveExploits0
Rows per page
Query Builder