Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:13496
HistoryMar 22, 2019 - 1:09 p.m.

Directory Traversal

2019-03-2213:09:22
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
8

EPSS

0.006

Percentile

78.3%

serve is vulnerable to directory traversal. The vulnerability exists because it gives an easy interface to list directory contents and traverse into sub-folder just by submitting a URL with dot-slash before the file name, e.g. http://127.0.0.1:6060/dir/./file.txt.

EPSS

0.006

Percentile

78.3%