EUVD-2021-1194

Malware in sbrugna...

CVE-2020-8214

A path traversal vulnerability in servey version 3 allows an attacker to read content of any arbitrary file...

GHSA-V3PX-6CC8-F8J3 Path traversal in servey

A path traversal vulnerability in servey versions prior to 3.3.2 allows an attacker to read content of any arbitrary file...

Path traversal in servey

A path traversal vulnerability in servey versions prior to 3.3.2 allows an attacker to read content of any arbitrary file...

muleify (>=2.5.7 <=4.0.5), oxe-cli (>=1.1.0 <=1.1.3) potentially affected by CVE-2020-8214 via servey (>=1.0.3 <=2.2.0)

servey NPM version =1.0.3, =2.5.7, =1.1.0, =1.1.3 Source cves: CVE-2020-8214 Source advisory: OSV:GHSA-V3PX-6CC8-F8J3...

CVE-2020-8214

A path traversal vulnerability in servey version 3 allows an attacker to read content of any arbitrary file...

Path traversal

A path traversal vulnerability in servey version 3 allows an attacker to read content of any arbitrary file...

CVE-2020-8214

CVE-2020-8214 affects the Node.js module servey (older than 3.3.2). The vulnerability is a directory traversal flaw in the server that serves static content, allowing an attacker to read arbitrary files by crafting URLs with ../../ traversal. Public material shows proof-of-concept behavior such a...

CVE-2020-8214

A path traversal vulnerability in servey version 3 allows an attacker to read content of any arbitrary file...

muleify (>=2.5.7 <=4.0.5), oxe-cli (>=1.1.0 <=1.1.3) potentially affected by unknown CVE via servey (>=1.0.3 <=2.2.0)

servey NPM version =1.0.3, =2.5.7, =1.1.0, =1.1.3 Source cves: unknown CVE Source advisory: OSV:GHSA-RV49-54QP-FW42...

Path Traversal in servey

Versions of servey prior to 3.x are vulnerable to Path Traversal. Due to insufficient input sanitization, attackers can access server files by using relative paths. Recommendation Upgrade to the latest version...

GHSA-RV49-54QP-FW42 Path Traversal in servey

Versions of servey prior to 3.x are vulnerable to Path Traversal. Due to insufficient input sanitization, attackers can access server files by using relative paths. Recommendation Upgrade to the latest version...

Path Traversal

Overview Versions of servey prior to 3.x are vulnerable to Path Traversal. Due to insufficient input sanitization, attackers can access server files by using relative paths. Recommendation Upgrade to the latest version References - HackerOne Report - GitHub Advisory...

Node.js third-party modules: [servey] Path Traversal allows to retrieve content of any file with extension from remote server

Hi Team, I would like to report a partial Path Traversal in servey module. It allows to read content of any arbitrary file with extension from the server. Module module name: servey version: 2.2.0 npm page: https://www.npmjs.com/package/servey Module Description A static & single page application...