Directory Traversal in shit-server

Affected versions of shit-server resolve relative file paths, resulting in a directory traversal vulnerability. A malicious actor can use this vulnerability to access files outside of the intended directory root, which may result in the disclosure of private files on the vulnerable system. Exampl...

GHSA-6X8C-MVPV-5366 Directory Traversal in shit-server

Affected versions of shit-server resolve relative file paths, resulting in a directory traversal vulnerability. A malicious actor can use this vulnerability to access files outside of the intended directory root, which may result in the disclosure of private files on the vulnerable system. Exampl...

shit-server directory traversal vulnerability

shit-server is a file server. A directory traversal vulnerability exists in shit-server. An attacker can exploit this vulnerability to gain access to the file system by placing a '... /' sequence in a URL to gain access to the file system...

CVE-2017-16147

shit-server is a file server. shit-server is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the url...

CVE-2017-16147

The CVE-2017-16147 entry applies to the npm package shit-server, a file server affected by a directory traversal vulnerability. According to the sources, providing URLs containing traversal sequences (e.g., ../ or multiple ../) allows an attacker to access files outside the intended directory roo...

Directory Traversal

Overview Affected versions of shit-server resolve relative file paths, resulting in a directory traversal vulnerability. A malicious actor can use this vulnerability to access files outside of the intended directory root, which may result in the disclosure of private files on the vulnerable syste...