WS-2019-0212

takeapeek all versions are vulnerable to XSS, allowing attackers to execute arbitrary JavaScript in the victim's browser through files with names containing malicious code...

EUVD-2018-0722

Malware in sbrugna...

GHSA-4Q2F-8G74-QM56 Cross-Site Scripting in takeapeek

All versions of takeapeek are vulnerable to Cross-Site Scripting XSS. The package fails to sanitize filenames, allowing attackers to execute arbitrary JavaScript in the victim's browser through files with names containing malicious code. Recommendation No fix is currently available. Consider usin...

PT-2020-21024

Name of the Vulnerable Software and Affected Versions takeapeek versions all versions Description The issue concerns a failure to sanitize filenames, which allows attackers to execute arbitrary JavaScript in the victim's browser through files with names containing malicious code. This is a...

Cross-Site Scripting

Overview All versions of takeapeek are vulnerable to Cross-Site Scripting XSS. The package fails to sanitize filenames, allowing attackers to execute arbitrary JavaScript in the victim's browser through files with names containing malicious code. Recommendation No fix is currently available...

Node.js third-party modules: [takeapeek] XSS via HTML tag injection in directory lisiting page

I was taking a peek at takeapeek module and found it is vulnerable to XSS via malicious injection in directory listing. It allows execution of arbitrary JS code. Module module name: takeapeek version: 0.2.2 npm page: https://www.npmjs.com/package/takeapeek Module Description A simple static...

Path Traversal

Overview All versions of takeapeek are vulnerable to path traversal exposing files and directories. Recommendation As no fix is currently available for this vulnerability is it is our recommendation to use another static file server. References - HackerOne Report - Node.js Security-wg - GitHub...

Path Traversal in takeapeek

All versions of takeapeek are vulnerable to path traversal exposing files and directories. Recommendation As no fix is currently available for this vulnerability is it is our recommendation to use another static file server...

Path traversal

A path traversal in takeapeek module versions =0.2.2 allows an attacker to list directory and files...

CVE-2018-16473

A path traversal in takeapeek module versions =0.2.2 allows an attacker to list directory and files...

CVE-2018-16473

A path traversal in takeapeek module versions =0.2.2 allows an attacker to list directory and files...

CVE-2018-16473

CVE-2018-16473 affects the takeapeek Node.js module with versions ≤ 0.2.2. A path traversal vulnerability allows an attacker to list directories and files on the webserver by crafting requests that traverse the filesystem (e.g., using ../../.. paths). Public disclosures from NVD, Node.js advisory...

CVE-2018-16473

A path traversal in takeapeek module versions =0.2.2 allows an attacker to list directory and files...

CVE-2018-16473: Improper Limitation of a Pathname to a Restricted Directory

A path traversal in takeapeek module versions =0.2.2 allows an attacker to list directory and files...

PT-2018-13596

Name of the Vulnerable Software and Affected Versions takeapeek versions =0.2.2 takeapeek versions prior to a fixed version no specific fixed version mentioned Description A path traversal issue in the takeapeek module allows an attacker to list directories and files. All versions of takeapeek ar...