CVE-2023-45539

HAProxy before 2.8.2 accepts as part of the URI component, which might allow remote attackers to obtain sensitive information or have unspecified other impact upon misinterpretation of a pathend rule, such as routing index.html.png to a static server...

CVE-2023-45539

HAProxy before 2.8.2 accepts as part of the URI component, which might allow remote attackers to obtain sensitive information or have unspecified other impact upon misinterpretation of a pathend rule, such as routing index.html.png to a static server...

CVE-2023-45539

HAProxy before 2.8.2 accepts as part of the URI component, which might allow remote attackers to obtain sensitive information or have unspecified other impact upon misinterpretation of a pathend rule, such as routing index.html.png to a static server...

Path Traversal

static-server is vulnerable to Path Traversal. The vulnerability exists because the library does not properly validate file paths in server.js, allowing an attacker to access files outside the expected directory and read arbitrary files through the relative path such as \..\filename...

@anfo/difftool (>=0.0.1, <=0.0.11), @bdefore/nivo-patterned-radial-arc (0.79.1) +124 more potentially affected by CVE-2023-26152 via static-server (>=2.0.0, <=2.2.1)

static-server NPM version =2.0.0, =0.0.1, =0.0.1, =2.0.0-beta.1, =0.1.21, =0.5.0, =0.0.1, =2.59.1-alpha.1, =1.1.0, =3.0.3, =0.1.10, =1.0.0, =1.0.2 and more Source cves: CVE-2023-26152 Source advisory: OSV:GHSA-V834-RHV4-65M3...

static-server Path Traversal vulnerability

All versions of the package static-server are vulnerable to Directory Traversal due to improper input sanitization passed via the validPath function of server.js...

GHSA-V834-RHV4-65M3 static-server Path Traversal vulnerability

All versions of the package static-server are vulnerable to Directory Traversal due to improper input sanitization passed via the validPath function of server.js...

CVE-2023-26152

All versions of the package static-server are vulnerable to Directory Traversal due to improper input sanitization passed via the validPath function of server.js...

CVE-2023-26152

All versions of the package static-server are vulnerable to Directory Traversal due to improper input sanitization passed via the validPath function of server.js...

CVE-2023-26152

All versions of the package static-server are vulnerable to Directory Traversal due to improper input sanitization passed via the validPath function of server.js...

CVE-2023-26152

CVE-2023-26152 affects the static-server package. The vulnerability stems from improper input sanitization in the validPath function of server.js, enabling Directory Traversal to access files outside the intended directory. Exploitation details, affected versions, and remediation are not provided...

CVE-2023-26152: Improper Limitation of a Pathname to a Restricted Directory

All versions of the package static-server are vulnerable to Directory Traversal due to improper input sanitization passed via the validPath function of server.js...

static-server path traversal vulnerability

statics-server is a server used to collect information about the environment in which Joomla is installed. A path traversal vulnerability exists in statics-server, which stems from improperly cleaned input passed via the validPath function of server.js, making it susceptible to directory traversa...

PT-2023-20531

Name of the Vulnerable Software and Affected Versions static-server versions all Description The issue arises from improper input sanitization passed via the validPath function of server.js, leading to Directory Traversal. This vulnerability affects a popular library that had 100,000 weekly...

Directory Traversal

Overview Affected versions of this package are vulnerable to Directory Traversal due to improper input sanitization passed via the validPath function of server.js. PoC 1 Make sure you have a public/ directory with files in it. 2 Make sure you have a public-isprivate directory with files in it. 3...

@anfo/difftool (>=0.0.1, <=0.0.11), @bdefore/nivo-patterned-radial-arc (0.79.1) +133 more potentially affected by CVE-2023-26152 via static-server (>=2.0.0, <=3.0.0)

static-server NPM version =2.0.0, =0.0.1, =0.0.1, =2.0.0-beta.1, =0.1.21, =0.5.0, =0.0.1, =2.59.1-alpha.1, =1.1.0, =3.0.3, =0.1.10, =1.0.0, =1.0.2 and more Source cves: CVE-2023-26152 Source advisory: SNYK:JS-STATICSERVER-5722341...

serve-lite 跨站脚本漏洞

serve-lite is a lightweight http server for static file-based web development. A security vulnerability exists in serve-lite that stems from presenting file listings without cleaning or escaping them when a request for a directory is received...

Directory Traversal

easy-static-server is vulnerable to directory traversal. The vulnerability exists in the easyServer function of index.js due to missing input sanitization which allows an attacker to access files and directories that are stored outside the intended folder via req.url...

CVE-2022-25931

All versions of package easy-static-server are vulnerable to Directory Traversal due to missing input sanitization and sandboxes being employed to the req.url user input that is passed to the server code...

CVE-2022-25931

CVE-2022-25931 affects all versions of the npm package easy-static-server. The root cause is missing input sanitization and the use of sandboxes around req.url in the easyServer function (index.js), enabling a Directory Traversal attack to access files/directories outside the intended folder. Doc...