Lucene search
Veracode Vulnerability DatabaseVERACODE:13621HistoryApr 09, 2019 - 3:36 p.m.
Directory Traversal
2019-04-0915:36:06
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
4
0.001 Low
EPSS
Percentile
48.4%
harp is vulnerable to directory traversal. The attack exists due to the ignorance of the harp server rules for the file path starting with underscore, allowing an unauthorized listing of the files in another folder of web root.
Related
nvd
nvd
CVE-2019-5438
2019-05-10 22:29:00
cvelist
cvelist
CVE-2019-5438
2019-05-10 21:06:31
cve
cve
CVE-2019-5438
2019-05-10 22:29:00
prion
prion
Path traversal
2019-05-10 22:29:00
hackerone
hackerone
Node.js third-party modules: [harp] Path traversal using symlink
2019-04-06 18:40:03
nodejs
nodejs
Unauthorized File Access
2019-04-17 18:28:07
osv
osv
Unauthorized File Access in harp
2019-06-13 16:12:26
github
github
Unauthorized File Access in harp
2019-06-13 16:12:26