EUVD-2021-1194

Malware in sbrugna...

CVE-2020-8214

A path traversal vulnerability in servey version 3 allows an attacker to read content of any arbitrary file...

Path traversal in servey

A path traversal vulnerability in servey versions prior to 3.3.2 allows an attacker to read content of any arbitrary file...

GHSA-V3PX-6CC8-F8J3 Path traversal in servey

A path traversal vulnerability in servey versions prior to 3.3.2 allows an attacker to read content of any arbitrary file...

CVE-2020-8214

A path traversal vulnerability in servey version 3 allows an attacker to read content of any arbitrary file...

Path traversal

A path traversal vulnerability in servey version 3 allows an attacker to read content of any arbitrary file...

CVE-2020-8214

A path traversal vulnerability in servey version 3 allows an attacker to read content of any arbitrary file...

CVE-2020-8214

A path traversal vulnerability in servey version 3 allows an attacker to read content of any arbitrary file...

muleify (>=2.5.7, <=4.0.5), oxe-cli (>=1.1.0, <=1.1.3) potentially affected by CVE-2020-8214 via servey (>=1.0.3, <=2.2.0)

servey NPM version =1.0.3, =2.5.7, =1.1.0, =1.1.3 Source cves: CVE-2020-8214 Source advisory: MEND:CVE-2020-8214...

CVE-2020-8214

A path traversal vulnerability in servey version 3 allows an attacker to read content of any arbitrary file...

CVE-2020-8214

CVE-2020-8214 affects the Node.js module servey (older than 3.3.2). The vulnerability is a directory traversal flaw in the server that serves static content, allowing an attacker to read arbitrary files by crafting URLs with ../../ traversal. Public material shows proof-of-concept behavior such a...

CVE-2020-8214: Improper Limitation of a Pathname to a Restricted Directory

A path traversal vulnerability in servey version 3 allows an attacker to read content of any arbitrary file...

PT-2020-20028

Name of the Vulnerable Software and Affected Versions servey versions prior to 3.3.2 Description A path traversal issue allows an attacker to read the content of any arbitrary file. Recommendations For servey versions prior to 3.3.2, update to version 3.3.2 or later to resolve the issue...

Path Traversal in servey

Versions of servey prior to 3.x are vulnerable to Path Traversal. Due to insufficient input sanitization, attackers can access server files by using relative paths. Recommendation Upgrade to the latest version...

GHSA-RV49-54QP-FW42 Path Traversal in servey

Versions of servey prior to 3.x are vulnerable to Path Traversal. Due to insufficient input sanitization, attackers can access server files by using relative paths. Recommendation Upgrade to the latest version...

PT-2019-20067

Name of the Vulnerable Software and Affected Versions servey versions prior to 3.x Description The issue is related to Path Traversal due to insufficient input sanitization, allowing attackers to access server files by using relative paths. Recommendations For servey versions prior to 3.x, upgrad...

Path Traversal

Overview Versions of servey prior to 3.x are vulnerable to Path Traversal. Due to insufficient input sanitization, attackers can access server files by using relative paths. Recommendation Upgrade to the latest version References - HackerOne Report - GitHub Advisory...

Node.js third-party modules: [servey] Path Traversal allows to retrieve content of any file with extension from remote server

Hi Team, I would like to report a partial Path Traversal in servey module. It allows to read content of any arbitrary file with extension from the server. Module module name: servey version: 2.2.0 npm page: https://www.npmjs.com/package/servey Module Description A static & single page application...