Lucene search
Veracode Vulnerability DatabaseVERACODE:20562HistoryJun 19, 2019 - 3:12 a.m.
Directory Traversal
2019-06-1903:12:46
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
9
EPSS
0.001
Percentile
47.7%
serve-handler is vulnerable to directory traversal. Attackers are able to access explicitly ignored folders using directory traversal characters ../ followed by the ignored folders. This vulnerability is a bypass of the fix for CVE-2018-3718.
Related
osv
osv
CVE-2018-3718
2018-06-07 02:29:08
vercel/serve allows access to restricted files if filename is URL encoded.
2021-08-09 22:24:26
nvd
nvd
CVE-2018-3718
2018-06-07 02:29:08
hackerone
hackerone
cvelist
cvelist
CVE-2018-3718
2018-06-07 02:00:00
cve
cve
CVE-2018-3718
2018-06-07 02:29:08
veracode
veracode
Information Disclosure
2018-03-16 02:49:45
prion
prion
Code injection
2018-06-07 02:29:00
github
github
vercel/serve allows access to restricted files if filename is URL encoded.
2021-08-09 22:24:26