Design/Logic Flaw

The inert directory handler in inert node module before 1.1.1 always allows files in hidden directories to be served, even when showHidden is false...

CVE-2014-10068

The CVE-2014-10068 issue affects the inert Node.js module (inert) prior to 1.1.1, where the inert directory handler can serve files from hidden directories even when showHidden is false. Affected versions are 1.1.0 and earlier. The root cause is an information-disclosure vulnerability in the dire...

CVE-2014-10068

The inert directory handler in inert node module before 1.1.1 always allows files in hidden directories to be served, even when showHidden is false...

Hidden Directories Always Served

Overview Versions 1.1.1 and earlier of inert are vulnerable to an information leakage vulnerability which causes files in hidden directories to be served, even when showHidden is false. The inert directory handler always allows files in hidden directories to be served, even when showHidden is...