EUVD-2022-0616

Malicious code in bioql PyPI...

Linux Distros Unpatched Vulnerability : CVE-2021-23797

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - All versions of package http-server-node are vulnerable to Directory Traversal via use of --path-as-is. CVE-2021-23797 Note that Nessus relies on the presence o...

GHSA-HJ3M-V758-JWX5 Path Traversal in http-server-node

All versions of package http-server-node are vulnerable to Directory Traversal via use of --path-as-is...

Path Traversal in http-server-node

All versions of package http-server-node are vulnerable to Directory Traversal via use of --path-as-is...

Directory Traversal

http-server-node is vulnerable to directory traversal. The vulnerability exists due to lack of sanitization of user inputs which allows an attacker to gain access to the files outside of the server scope...

UBUNTU-CVE-2021-23797

All versions of package http-server-node are vulnerable to Directory Traversal via use of --path-as-is...

Directory traversal

All versions of package http-server-node are vulnerable to Directory Traversal via use of --path-as-is...

CVE-2021-23797

CVE-2021-23797 affects the http-server-node package (all versions) with a Directory Traversal flaw exploitable via the --path-as-is option. The underlying issue is insufficient validation/handling of path parameters, enabling access to sensitive files and compromising confidentiality, integrity, ...

CVE-2021-23797

Removed by vendor...

CVE-2021-23797 Directory Traversal

All versions of package http-server-node are vulnerable to Directory Traversal via use of --path-as-is...

http-server-node 路径遍历漏洞

Http-Server-Node is an Http server by the individual developer Guro Beridze in Georgia. A security vulnerability exists in http-server-node due to a lack of effective restriction and filtering of directory permissions and path parameters. An attacker can exploit this vulnerability to obtain...

Directory Traversal

Overview http-server-node is a simple, zero-configuration command-line http server Affected versions of this package are vulnerable to Directory Traversal via use of --path-as-is. PoC curl -s --path-as-is http://127.0.0.1:3000/../sensitive-file.txt Details A Directory Traversal attack also known ...