Path Traversal in stattic

Versions of stattic before 0.3.0 are vulnerable to path traversal allowing a remote attacker to read arbitrary files with any extension from the server that users stattic. Recommendation Update to version 0.3.0 or later...

GHSA-W4PV-W56C-MG4V Path Traversal in stattic

Versions of stattic before 0.3.0 are vulnerable to path traversal allowing a remote attacker to read arbitrary files with any extension from the server that users stattic. Recommendation Update to version 0.3.0 or later...

Stattic Node Module Path Traversal Vulnerability

The stattic node module is a script that serves static files using the http module. A path traversal vulnerability exists in the stattic node module, which stems from a lack of path validation in the program. An attacker could use this vulnerability to read the contents of an arbitrary file...

Path traversal

stattic node module suffers from a Path Traversal vulnerability due to lack of validation of path, which allows a malicious user to read content of any file with known path...

PT-2018-16158 · Stattic · Stattic

Name of the Vulnerable Software and Affected Versions: stattic versions prior to 0.3.0 Description: The issue is related to a Path Traversal vulnerability due to the lack of validation of path, which allows a malicious user to read the content of any file with a known path. This vulnerability can...

Path Traversal

Overview Versions of stattic before 0.3.0 are vulnerable to path traversal allowing a remote attacker to read arbitrary files with any extension from the server that users stattic. Recommendation Update to version 0.3.0 or later. References - HackerOne Report - GitHub Advisory...

Path Traversal

stattic is vulnerable to path traversal attacks. Using a string including ../, attackers can traverse the server and any file with a known path...

Node.js third-party modules: [stattic] Inproper path validation leads to Path Traversal and allows to read arbitrary files with any extension(s)

I would like to report Path Traversal in stattic module. It allows to read content of some arbitrary files from the server where stattic is installed and run. Module module name: stattic version: 0.2.3 npm page: https://www.npmjs.com/package/stattic Module Description Ridiculous simple script for...