Lucene search
K

4 matches found

OSV
OSV
added 2020/09/03 4:49 p.m.7 views

GHSA-QJFH-XC44-RM9X Path Traversal in file-static-server

All versions of file-static-server are vulnerable to Path Traversal. Due to insufficient input sanitization in URLs, attackers can access server files by using relative paths when fetching files. Recommendation No fix is currently available. Consider using an alternative module until a fix is mad...

7AI score
Exploits0References2
Github Security Blog
Github Security Blog
added 2020/09/03 4:49 p.m.16 views

Path Traversal in file-static-server

All versions of file-static-server are vulnerable to Path Traversal. Due to insufficient input sanitization in URLs, attackers can access server files by using relative paths when fetching files. Recommendation No fix is currently available. Consider using an alternative module until a fix is mad...

4.7AI score
Exploits0References3Affected Software1
Veracode
Veracode
added 2018/06/18 8:46 a.m.6 views

Directory Traversal

file-static-server is vulnerable to directory traversal attacks. The attack is possible by requesting a url such as /..%2f..%2fetc/passwd to get sensitive information...

6.6AI score
Exploits0
Hacker One
Hacker One
added 2018/01/30 11:37 p.m.23 views

Node.js third-party modules: [file-static-server] Path Traversal allows to read content of arbitrary file on the server

Hi Guys, There is Path Traversal vulnerability in file-static-server module, which allows to read arbitrary file from the remote server. Module file-static-server no description provided https://www.npmjs.com/package/file-static-server version: 1.0.2 Stats 0 downloads in the last day 3 downloads ...

0.3AI score
Exploits0
Rows per page
Query Builder