Http-file-server Security Vulnerabilities and Issues — Http-file-server CVE List

Http-file-server ProjectHttp-file-server

2 matches found

CVE•added 2019/07/30 8:21 p.m.•60 views

CVE-2019-5458

CVE-2019-5458 concerns the Node.js module http-file-server. All versions are vulnerable to a Cross-Site Scripting (XSS) flaw in directory listings: the server fails to sanitize filenames, allowing stored/reflective JavaScript in the victim’s browser when a user browses the listing. Evidence in co...

5.4CVSS5.4AI score0.00709EPSS

Save

CVE•added 2019/07/15 5:57 p.m.•59 views

CVE-2019-5447

CVE-2019-5447 affects the http-file-server npm module (versions

5.3CVSS5.2AI score0.01502EPSS

Save