Lucene search
+L

6 matches found

Github Security Blog
Github Security Blog
•added 2020/09/03 8:26 p.m.•41 views

Path Traversal in public

All versions of public are vulnerable to Path Traversal. This vulnerability allows an attacker to access files outside the webroot since it allows symlink navigation in the URL. Recommendation No fix is currently available. Do not use public in production or consider using an alternative module...

5.2AI score
SaveExploits0References3Affected Software1
OSV
OSV
•added 2020/09/03 8:26 p.m.•12 views

GHSA-4VVP-X9H2-X2VF Path Traversal in public

All versions of public are vulnerable to Path Traversal. This vulnerability allows an attacker to access files outside the webroot since it allows symlink navigation in the URL. Recommendation No fix is currently available. Do not use public in production or consider using an alternative module...

7AI score
SaveExploits0References2
nodejs
nodejs
•added 2019/09/04 3:40 p.m.•17 views

Path Traversal

Overview All versions of public are vulnerable to Path Traversal. This vulnerability allows an attacker to access files outside the webroot since it allows symlink navigation in the URL. Recommendation No fix is currently available. Do not use public in production or consider using an alternative...

6.7AI score
SaveExploits0Affected Software1
nodejs
nodejs
•added 2018/12/07 8:07 p.m.•442 views

Path Traversal

Overview All versions of simplehttpserver are vulnerable to Path Traversal. This vulnerability allows an attacker to access files outside the webroot since it allows symlink navigation in the URL. Recommendation No fix is currently available. Do not use simplehttpserver in production or consider...

5CVSS3.2AI score0.01295EPSS
SaveExploits0Affected Software1
Github Security Blog
Github Security Blog
•added 2018/12/06 3:49 p.m.•75 views

Path Traversal in simplehttpserver

All versions of simplehttpserver are vulnerable to Path Traversal. This vulnerability allows an attacker to access files outside the webroot since it allows symlink navigation in the URL. Recommendation No fix is currently available. Do not use simplehttpserver in production or consider using an...

5.3CVSS4AI score0.01295EPSS
SaveExploits0References5Affected Software1
Positive Technologies
Positive Technologies
•added 2018/12/04 12:00 a.m.•1 views

PT-2018-13600

Name of the Vulnerable Software and Affected Versions simplehttpserver versions =0.2.1 simplehttpserver versions all versions are affected Description The issue allows an attacker to access files outside the webroot due to a Path Traversal vulnerability. This is possible because the vulnerability...

5.3CVSS0.01295EPSS
SaveExploits0References8
Rows per page
Query Builder