8 matches found
GHSA-VCXH-QVGR-9FW9 m.static Directory Traversal vulnerability
All versions of the package m.static are vulnerable to Directory Traversal due to improper input sanitization of the path being requested via the requestFile function...
m.static Directory Traversal vulnerability
All versions of the package m.static are vulnerable to Directory Traversal due to improper input sanitization of the path being requested via the requestFile function...
CVE-2023-26126
All versions of the package m.static are vulnerable to Directory Traversal due to improper input sanitization of the path being requested via the requestFile function...
CVE-2023-26126
All versions of the package m.static are vulnerable to Directory Traversal due to improper input sanitization of the path being requested via the requestFile function...
Directory traversal
All versions of the package m.static are vulnerable to Directory Traversal due to improper input sanitization of the path being requested via the requestFile function...
CVE-2023-26126
All versions of the package m.static are vulnerable to Directory Traversal due to improper input sanitization of the path being requested via the requestFile function...
m.static 路径遍历漏洞
npm m.static is a lightweight static file server for node.js written in es6+ from the US company npm. A security vulnerability exists in m.static that stems from incorrect input cleanup of paths requested via the requestFile function...
PT-2023-20506 · M.Static · M.Static
Name of the Vulnerable Software and Affected Versions: m.static versions all Description: The issue arises from improper input sanitization of the path being requested via the requestFile function, leading to Directory Traversal. This allows unauthorized access to files and directories outside th...