@11ty/eleventy (0.3.3), @amlopez333/mrhyde (>=0.4.2, <=0.4.8) +190 more potentially affected by CVE-2019-5415 via serve (>=1.2.0, <=6.5.8)

serve NPM version =1.2.0, =0.4.2, =2018.4.29-7, =2018.4.29-8, =2018.5.11-6, =1.1.11, =1.1.1, =0.2.0, =0.4.0, =0.4.10, =2.0.0-beta.20, =0.0.1-prealpha, =0.0.1-0, =0.0.1-10 - @iamstarkov/html-sketchapp-cli 0.2.0 and more Source cves: CVE-2019-5415 Source advisory: MEND:CVE-2019-5415...

CVE-2019-5415

CVE-2019-5415 concerns the Node.js module serve (version 6.5.3) where the ignore feature can be bypassed via a dot-slash path, allowing an attacker to read files or list directories that should be ignored. The root cause is improper handling of ignored paths in the file-serving logic, enabling pa...

CVE-2019-5415

A bug in handling the ignore files and directories feature in serve 6.5.3 allows an attacker to read a file or list the directory that the victim has not allowed access to...

CVE-2019-5415

A bug in handling the ignore files and directories feature in serve 6.5.3 allows an attacker to read a file or list the directory that the victim has not allowed access to...

CVE-2019-5417

The CVE-2019-5417 entry concerns the Node.js module serve (version 7.0.1). The vulnerability is a directory traversal flaw where file paths are not sanitized, enabling an attacker to read arbitrary files on the remote server. The related documents confirm affected software is the serve package an...

@11ty/eleventy (0.3.3), @amlopez333/mrhyde (>=0.4.2, <=0.4.8) +191 more potentially affected by CVE-2019-5417 via serve (>=1.2.0, <=7.0.0)

serve NPM version =1.2.0, =0.4.2, =2018.4.29-7, =2018.4.29-8, =2018.5.11-6, =1.1.11, =1.1.1, =0.2.0, =0.4.0, =0.4.10, =2.0.0-beta.20, =0.0.1-prealpha, =0.0.1-0, =0.0.1-10 - @iamstarkov/html-sketchapp-cli 0.2.0 and more Source cves: CVE-2019-5417 Source advisory: MEND:CVE-2019-5417...

CVE-2019-5417

A path traversal vulnerability in serve npm package version 7.0.1 allows the attackers to read content of arbitrary files on the remote server...

PT-2019-17653

Name of the Vulnerable Software and Affected Versions serve versions prior to 7.1.3 Description A path traversal issue allows attackers to read the content of arbitrary files on a remote server. This is due to a lack of sanitization of file paths, leading to unauthorized access of system files...

PT-2019-17651

Name of the Vulnerable Software and Affected Versions serve versions prior to 7.0.1 Description A bug in handling the ignore files and directories feature in serve allows an attacker to read a file or list the directory that the victim has not allowed access to. This issue is related to Path...

CVE-2019-5415: Exposure of Information Through Directory Listing

A bug in handling the ignore files and directories feature in serve 6.5.3 allows an attacker to read a file or list the directory that the victim has not allowed access to...

CVE-2019-5417: Improper Limitation of a Pathname to a Restricted Directory

A path traversal vulnerability in serve npm package version 7.0.1 allows the attackers to read content of arbitrary files on the remote server...

Node.js third-party modules: [serve] Path Traversal

I would like to report path traversal vulnerability in serve module It allows an attacker to read system files via path traversal vulnerability Module module name: serve version: 10.1.2 npm page: https://www.npmjs.com/package/serve Module Description Assuming you would like to serve a static site...

Directory Traversal in bitty

Affected versions of bitty are vulnerable to directory traversal via the URL path in GET requests. Recommendation The bitty package is not currently maintained, and has not seen an update since 2015. At this time, the best available mitigation is to use an alternative module that is actively...

Node.js third-party modules: [serve] Access unlisted internal files/folders revealing sensitive information

I would like to report sensitive information disclosure in serve. Bypass of 308721 in ways. Module module name: serve version: 10.1.1 npm page: https://www.npmjs.com/package/serve Module Description Assuming you would like to serve a static site, single page application or just a static file no...

ALPINE-CVE-2018-5737

A problem with the implementation of the new serve-stale feature in BIND 9.12 can lead to an assertion failure in rbtdb.c, even when stale-answer-enable is off. Additionally, problematic interaction between the serve-stale feature and NSEC aggressive negative caching can in some cases cause...

CVE-2018-5737

A problem with the implementation of the new serve-stale feature in BIND 9.12 can lead to an assertion failure in rbtdb.c, even when stale-answer-enable is off. Additionally, problematic interaction between the serve-stale feature and NSEC aggressive negative caching can in some cases cause...

CVE-2018-5737

A problem with the implementation of the new serve-stale feature in BIND 9.12 can lead to an assertion failure in rbtdb.c, even when stale-answer-enable is off. Additionally, problematic interaction between the serve-stale feature and NSEC aggressive negative caching can in some cases cause...

CVE-2018-5737

A problem with the implementation of the new serve-stale feature in BIND 9.12 can lead to an assertion failure in rbtdb.c, even when stale-answer-enable is off. Additionally, problematic interaction between the serve-stale feature and NSEC aggressive negative caching can in some cases cause...

Design/Logic Flaw

A problem with the implementation of the new serve-stale feature in BIND 9.12 can lead to an assertion failure in rbtdb.c, even when stale-answer-enable is off. Additionally, problematic interaction between the serve-stale feature and NSEC aggressive negative caching can in some cases cause...

CVE-2018-5737

A problem with the implementation of the new serve-stale feature in BIND 9.12 can lead to an assertion failure in rbtdb.c, even when stale-answer-enable is off. Additionally, problematic interaction between the serve-stale feature and NSEC aggressive negative caching can in some cases cause...