Lucene search
K

8 matches found

OSV
OSV
added 2023/05/10 6:30 a.m.27 views

GHSA-VCXH-QVGR-9FW9 m.static Directory Traversal vulnerability

All versions of the package m.static are vulnerable to Directory Traversal due to improper input sanitization of the path being requested via the requestFile function...

7.5CVSS6.1AI score0.00651EPSS
Exploits1References5
Github Security Blog
Github Security Blog
added 2023/05/10 6:30 a.m.33 views

m.static Directory Traversal vulnerability

All versions of the package m.static are vulnerable to Directory Traversal due to improper input sanitization of the path being requested via the requestFile function...

7.5CVSS6.1AI score0.00651EPSS
Exploits1References5Affected Software1
NVD
NVD
added 2023/05/10 5:15 a.m.10 views

CVE-2023-26126

All versions of the package m.static are vulnerable to Directory Traversal due to improper input sanitization of the path being requested via the requestFile function...

7.5CVSS7.5AI score0.00651EPSS
Exploits1References2
OSV
OSV
added 2023/05/10 5:15 a.m.1 views

CVE-2023-26126

All versions of the package m.static are vulnerable to Directory Traversal due to improper input sanitization of the path being requested via the requestFile function...

5.3CVSS5.8AI score
Exploits0References2
Prion
Prion
added 2023/05/10 5:15 a.m.12 views

Directory traversal

All versions of the package m.static are vulnerable to Directory Traversal due to improper input sanitization of the path being requested via the requestFile function...

5CVSS5.3AI score0.00651EPSS
Exploits1References2Affected Software1
Cvelist
Cvelist
added 2023/05/10 5:0 a.m.14 views

CVE-2023-26126

All versions of the package m.static are vulnerable to Directory Traversal due to improper input sanitization of the path being requested via the requestFile function...

7.5CVSS7.7AI score0.00651EPSS
Exploits1References2
CNNVD
CNNVD
added 2023/05/10 12:0 a.m.2 views

m.static 路径遍历漏洞

npm m.static is a lightweight static file server for node.js written in es6+ from the US company npm. A security vulnerability exists in m.static that stems from incorrect input cleanup of paths requested via the requestFile function...

7.5CVSS6.4AI score0.00651EPSS
Exploits1References3
Positive Technologies
Positive Technologies
added 2023/05/10 12:0 a.m.3 views

PT-2023-20506 · M.Static · M.Static

Name of the Vulnerable Software and Affected Versions: m.static versions all Description: The issue arises from improper input sanitization of the path being requested via the requestFile function, leading to Directory Traversal. This allows unauthorized access to files and directories outside th...

7.5CVSS7.1AI score0.00651EPSS
Exploits1References7
Rows per page
Query Builder