Lucene search
K

5 matches found

Github Security Blog
Github Security Blog
added 2020/09/03 8:26 p.m.34 views

Path Traversal in public

All versions of public are vulnerable to Path Traversal. This vulnerability allows an attacker to access files outside the webroot since it allows symlink navigation in the URL. Recommendation No fix is currently available. Do not use public in production or consider using an alternative module...

5.2AI score
Exploits0References3Affected Software1
OSV
OSV
added 2020/09/03 8:26 p.m.7 views

GHSA-4VVP-X9H2-X2VF Path Traversal in public

All versions of public are vulnerable to Path Traversal. This vulnerability allows an attacker to access files outside the webroot since it allows symlink navigation in the URL. Recommendation No fix is currently available. Do not use public in production or consider using an alternative module...

7AI score
Exploits0References2
Node.js
Node.js
added 2019/09/04 3:40 p.m.9 views

Path Traversal

Overview All versions of public are vulnerable to Path Traversal. This vulnerability allows an attacker to access files outside the webroot since it allows symlink navigation in the URL. Recommendation No fix is currently available. Do not use public in production or consider using an alternative...

6.7AI score
Exploits0Affected Software1
Node.js
Node.js
added 2018/12/07 8:7 p.m.430 views

Path Traversal

Overview All versions of simplehttpserver are vulnerable to Path Traversal. This vulnerability allows an attacker to access files outside the webroot since it allows symlink navigation in the URL. Recommendation No fix is currently available. Do not use simplehttpserver in production or consider...

5CVSS3.2AI score0.00215EPSS
Exploits0Affected Software1
Github Security Blog
Github Security Blog
added 2018/12/06 3:49 p.m.68 views

Path Traversal in simplehttpserver

All versions of simplehttpserver are vulnerable to Path Traversal. This vulnerability allows an attacker to access files outside the webroot since it allows symlink navigation in the URL. Recommendation No fix is currently available. Do not use simplehttpserver in production or consider using an...

5.3CVSS4AI score0.00215EPSS
Exploits0References5Affected Software1
Rows per page
Query Builder