Lucene search
+L
NbluisStatic-server

1 matches found

CVE
CVE
added 2023/10/03 5:0 a.m.87 views

CVE-2023-26152

CVE-2023-26152 affects the static-server package. The vulnerability stems from improper input sanitization in the validPath function of server.js, enabling Directory Traversal to access files outside the intended directory. Exploitation details, affected versions, and remediation are not provided...

7.5CVSS7.5AI score0.01088EPSS
Save