statics-server path traversal vulnerability

statics-server is a server for collecting information about Joomla installation environment. A path traversal vulnerability exists in statics-server. The vulnerability stems from a failure of a networked system or product to properly filter special elements in the path of a resource or file. An...

CVE-2019-15596

A path traversal in statics-server exists in all version that allows an attacker to perform a path traversal when a symlink is used within the working directory...

CVE-2019-15596

A path traversal in statics-server exists in all version that allows an attacker to perform a path traversal when a symlink is used within the working directory...

Path traversal

A path traversal in statics-server exists in all version that allows an attacker to perform a path traversal when a symlink is used within the working directory...

CVE-2019-15596

A path traversal in statics-server exists in all version that allows an attacker to perform a path traversal when a symlink is used within the working directory...

Path Traversal

Overview All versions of statics-server are vulnerable to Path Traversal. The package fails to limit access to files outside of the served folder through symlinks. Recommendation No fix is currently available. Do not use statics-server in production or consider using an alternative module until a...

Directory Traversal

statics-server is vulnerable to directory traversal. The attack is possible using a symlink inside the project directory, allowing an attacker to read arbitrary file on the server...

Node.js third-party modules: Path traversal using symlink

I would like to report Path Traversal in statics-server Module module name: statics-server version: 0.0.9 npm page: https://www.npmjs.com/package/statics-server Module Description npm install statics-server -g Go to the folder you want to statics-server Run the server statics-server Module Stats...

Path Traversal in statics-server

All versions of statics-server are vulnerable to Path Traversal. Due to insufficient input sanitization, attackers can access server files by using relative paths. Recommendation No fix is currently available. Consider using an alternative module until a fix is made available...

GHSA-74CP-QW7F-7HPW Path Traversal in statics-server

All versions of statics-server are vulnerable to Path Traversal. Due to insufficient input sanitization, attackers can access server files by using relative paths. Recommendation No fix is currently available. Consider using an alternative module until a fix is made available...

Directory Traversal

statics-server is vulnerable to directory traversal attacks. The vulnerability exists as the value of staticPath is not sanitized, allowing any file on the server to be read...

Path Traversal

Overview All versions of statics-server are vulnerable to Path Traversal. Due to insufficient input sanitization, attackers can access server files by using relative paths. Recommendation No fix is currently available. Consider using an alternative module until a fix is made available. References...

statics-server cross-site scripting vulnerability

statics-server is a static file server. A cross-site scripting vulnerability exists in statics-server 0.0.9 and earlier versions. A remote attacker can exploit this vulnerability by injecting an iframe into a file name to execute arbitrary JavaScript code...

Design/Logic Flaw

An XSS in statics-server = 0.0.9 can be used via injected iframe in the filename when statics-server displays directory index in the browser...

CVE-2018-3771

An XSS in statics-server = 0.0.9 can be used via injected iframe in the filename when statics-server displays directory index in the browser...

CVE-2018-3771

An XSS in statics-server = 0.0.9 can be used via injected iframe in the filename when statics-server displays directory index in the browser...

CVE-2018-3771

An XSS in statics-server = 0.0.9 can be used via injected iframe in the filename when statics-server displays directory index in the browser...

CVE-2018-3771

Summary: CVE-2018-3771 affects statics-server up to version 0.0.9, where directory listings are not HTML-escaped, allowing an attacker to inject an iframe via the filename and execute arbitrary JavaScript in a victim’s browser. This XSS occurs when the server displays the directory index. Impact ...

PT-2018-16189 · Unknown · Statics-Server

Name of the Vulnerable Software and Affected Versions: statics-server versions 0.0.0 through 0.0.9 Description: The issue is related to a Cross-Site Scripting XSS vulnerability. It occurs when statics-server displays a directory index in the browser and an attacker injects an iframe in the...

statics-directoriodehote.netdna-ssl.com XSS vulnerability

Open Bug Bounty ID: OBB-623587 Description| Value ---|--- Affected Website:| statics-directoriodehote.netdna-ssl.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3...