2 matches found
CVE-2019-5447
CVE-2019-5447 affects the http-file-server npm module (versions
CVE-2019-5458
CVE-2019-5458 concerns the Node.js module http-file-server. All versions are vulnerable to a Cross-Site Scripting (XSS) flaw in directory listings: the server fails to sanitize filenames, allowing stored/reflective JavaScript in the victim’s browser when a user browses the listing. Evidence in co...