CVE-2022-25931 Directory Traversal

All versions of package easy-static-server are vulnerable to Directory Traversal due to missing input sanitization and sandboxes being employed to the req.url user input that is passed to the server code...

CVE-2022-25931: Improper Limitation of a Pathname to a Restricted Directory

All versions of package easy-static-server are vulnerable to Directory Traversal due to missing input sanitization and sandboxes being employed to the req.url user input that is passed to the server code...

GHSA-WCWM-C3MR-PXCR easy-static-server vulnerable to Directory Traversal

All versions of package easy-static-server are vulnerable to Directory Traversal due to missing input sanitization and sandboxes being employed to the req.url user input that is passed to the server code...

easy-static-server vulnerable to Directory Traversal

All versions of package easy-static-server are vulnerable to Directory Traversal due to missing input sanitization and sandboxes being employed to the req.url user input that is passed to the server code...

CVE-2022-25931

All versions of package easy-static-server are vulnerable to Directory Traversal due to missing input sanitization and sandboxes being employed to the req.url user input that is passed to the server code...

easy-static-server 路径遍历漏洞

npm easy-static-server is a simple static file server from the US company npm. A security vulnerability exists in easy-static-server, which stems from a lack of input cleanup and vulnerability to directory traversal attacks...

PT-2022-17609

Name of the Vulnerable Software and Affected Versions easy-static-server versions all Description The issue arises due to missing input sanitization and the employment of sandboxes to the req.url user input that is passed to the server code, leading to Directory Traversal. Recommendations For all...

cobalt-bin (>=0.15.1, <=0.17.5), hyper-static-server (>=0.1.1, <=0.5.1) +10 more potentially affected by unknown CVE via sass-rs (0.2.2)

sass-rs CARGO version 0.2.2 is affected by a known vulnerability. The following packages have a transitive dependency on sass-rs and may be impacted: - cobalt-bin =0.15.1, =0.1.1, =0.1.6, =0.1.0, =0.1.0, =0.1.2, =0.1.1-alpha1, =0.7.0, =0.1.0, =0.1.2, =0.1.8 Source cves: unknown CVE Source advisor...

Path Traversal in file-static-server

All versions of file-static-server are vulnerable to Path Traversal. Due to insufficient input sanitization in URLs, attackers can access server files by using relative paths when fetching files. Recommendation No fix is currently available. Consider using an alternative module until a fix is mad...

GHSA-QJFH-XC44-RM9X Path Traversal in file-static-server

All versions of file-static-server are vulnerable to Path Traversal. Due to insufficient input sanitization in URLs, attackers can access server files by using relative paths when fetching files. Recommendation No fix is currently available. Consider using an alternative module until a fix is mad...

Directory Traversal

static-server-gx is vulnerable to directory traversal. The vulnerability exists as it does not validate the file path for input such as ../, allowing the escape from the target root directory...

PT-2020-21462

Name of the Vulnerable Software and Affected Versions file-static-server versions all versions Description The issue is related to Path Traversal due to insufficient input sanitization in URLs. Attackers can access server files by using relative paths when fetching files. Recommendations For all...

atqueillo (1.0.0), consequaturlaudantium (1.0.0) +11 more potentially affected by unknown CVE via ecstatic (>=2.0.0, <=2.1.0)

ecstatic NPM version =2.0.0, =1.8.4, =1.0.15, =1.0.0, =1.0.0, =1.2.0, =1.4.0 - react-currency-conversion 1.0.5 Source cves: unknown CVE Source advisory: OSV:GHSA-9Q64-MPXX-87FG...

statichttpserver Path Traversal Vulnerability

statichttpserver is a static file server. A path traversal vulnerability exists in statichttpserver version 0.9.7 and earlier, which can be exploited by an attacker to access locations outside of a restricted directory...

Node.js third-party modules: [static-server-gx] Path Traversal allowing to read any files on the server

I would like to report path traversal vulnerability in module "static-server-gx" It allows an attacker to read any files even system files via this path traversal vulnerability. Module module name: static-server-gx version: 1.2.1 npm page: https://www.npmjs.com/package/static-server-gx Module...

M-Server Cross-Site Scripting Vulnerability

M-Server is a small http static server . M-Server suffers from a cross-site scripting vulnerability that stems from the lack of proper validation of client-side data by the WEB application. An attacker can exploit this vulnerability to execute client-side code...

M-Server Path Traversal Vulnerability

m-server is a small http static server . M-Server suffers from a path traversal vulnerability that arises from a failure of a network system or product to properly filter special elements in the path of a resource or file. An attacker could use this vulnerability to access locations outside of a...

node-srv path traversal vulnerability

node-srv is a static Node.js server with support for Heroku and Grunt.js. A path traversal vulnerability exists in node-srv, which stems from the program's lack of url checksums. An attacker can exploit this vulnerability to read the contents of an arbitrary file with a known path...

Directory Traversal

file-static-server is vulnerable to directory traversal attacks. The attack is possible by requesting a url such as /..%2f..%2fetc/passwd to get sensitive information...

Augustine Path Traversal Vulnerability

augustine is a static HTTP server used in Node.js. A path traversal vulnerability exists in augustine, which stems from the program's lack of url validation. The vulnerability can be exploited by sending a specially crafted GET request to read the contents of an arbitrary file with a known path...