Lucene search
+L

8 matches found

Github Security Blog
Github Security Blog
•added 2023/05/10 6:30 a.m.•44 views

m.static Directory Traversal vulnerability

All versions of the package m.static are vulnerable to Directory Traversal due to improper input sanitization of the path being requested via the requestFile function...

7.5CVSS6.1AI score0.00994EPSS
SaveExploits1References5Affected Software1
OSV
OSV
•added 2023/05/10 6:30 a.m.•145 views

GHSA-VCXH-QVGR-9FW9 m.static Directory Traversal vulnerability

All versions of the package m.static are vulnerable to Directory Traversal due to improper input sanitization of the path being requested via the requestFile function...

7.5CVSS6.1AI score0.00994EPSS
SaveExploits1References5
OSV
OSV
•added 2023/05/10 5:15 a.m.•9 views

CVE-2023-26126

All versions of the package m.static are vulnerable to Directory Traversal due to improper input sanitization of the path being requested via the requestFile function...

5.3CVSS5.8AI score0.00994EPSS
SaveExploits1References2
NVD
NVD
•added 2023/05/10 5:15 a.m.•42 views

CVE-2023-26126

All versions of the package m.static are vulnerable to Directory Traversal due to improper input sanitization of the path being requested via the requestFile function...

7.5CVSS7.5AI score0.00994EPSS
SaveExploits1References2
Prion
Prion
•added 2023/05/10 5:15 a.m.•28 views

Directory traversal

All versions of the package m.static are vulnerable to Directory Traversal due to improper input sanitization of the path being requested via the requestFile function...

5CVSS5.3AI score0.00994EPSS
SaveExploits1References2Affected Software1
Cvelist
Cvelist
•added 2023/05/10 5:00 a.m.•52 views

CVE-2023-26126

All versions of the package m.static are vulnerable to Directory Traversal due to improper input sanitization of the path being requested via the requestFile function...

7.5CVSS7.7AI score0.00994EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2023/05/10 12:00 a.m.•18 views

PT-2023-20506 · M.Static · M.Static

Name of the Vulnerable Software and Affected Versions: m.static versions all Description: The issue arises from improper input sanitization of the path being requested via the requestFile function, leading to Directory Traversal. This allows unauthorized access to files and directories outside th...

7.5CVSS7.1AI score0.00994EPSS
SaveExploits1References7
CNNVD
CNNVD
•added 2023/05/10 12:00 a.m.•11 views

m.static 路径遍历漏洞

npm m.static is a lightweight static file server for node.js written in es6+ from the US company npm. A security vulnerability exists in m.static that stems from incorrect input cleanup of paths requested via the requestFile function...

7.5CVSS6.4AI score0.00994EPSS
SaveExploits1References3
Rows per page
Query Builder