Lucene search
K

6 matches found

OSV
OSV
added 2018/10/09 12:34 a.m.0 views

GHSA-PGV6-JRVV-75JP Moderate severity vulnerability that affects send

Withdrawn, accidental duplicate publish. visionmedia send before 0.8.4 for Node.js uses a partial comparison for verifying whether a directory is within the document root, which allows remote attackers to access restricted directories, as demonstrated using "public-restricted" under a "public"...

7.5CVSS5.9AI score0.04842EPSS
Exploits1References2
Github Security Blog
Github Security Blog
added 2018/10/09 12:34 a.m.16 views

Moderate severity vulnerability that affects send

Withdrawn, accidental duplicate publish. visionmedia send before 0.8.4 for Node.js uses a partial comparison for verifying whether a directory is within the document root, which allows remote attackers to access restricted directories, as demonstrated using "public-restricted" under a "public"...

7.5CVSS5.6AI score0.04842EPSS
Exploits1References2Affected Software1
OSV
OSV
added 2014/10/08 5:55 p.m.7 views

CVE-2014-6394

visionmedia send before 0.8.4 for Node.js uses a partial comparison for verifying whether a directory is within the document root, which allows remote attackers to access restricted directories, as demonstrated using "public-restricted" under a "public" directory...

6.3AI score
Exploits0References15
OSV
OSV
added 2014/10/08 5:55 p.m.0 views

UBUNTU-CVE-2014-6394

visionmedia send before 0.8.4 for Node.js uses a partial comparison for verifying whether a directory is within the document root, which allows remote attackers to access restricted directories, as demonstrated using "public-restricted" under a "public" directory...

7.5CVSS5.8AI score0.04842EPSS
Exploits1References3
UbuntuCve
UbuntuCve
added 2014/10/08 5:55 p.m.31 views

CVE-2014-6394

visionmedia send before 0.8.4 for Node.js uses a partial comparison for verifying whether a directory is within the document root, which allows remote attackers to access restricted directories, as demonstrated using "public-restricted" under a "public" directory...

7.5CVSS5.9AI score0.04842EPSS
Exploits1References2
Debian CVE
Debian CVE
added 2014/10/08 5:0 p.m.22 views

CVE-2014-6394

visionmedia send before 0.8.4 for Node.js uses a partial comparison for verifying whether a directory is within the document root, which allows remote attackers to access restricted directories, as demonstrated using "public-restricted" under a "public" directory...

7.5CVSS4.6AI score0.04842EPSS
Exploits1
Rows per page
Query Builder