Lucene search
Veracode Vulnerability DatabaseVERACODE:20888HistoryJul 25, 2019 - 5:30 a.m.
Cross-site Scripting (XSS)
2019-07-2505:30:46
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
5
0.001 Low
EPSS
Percentile
25.0%
min-http-server is vulnerable to cross-site scripting (XSS). The attack is due to lack of sanitization of filenames before rendering as HTML in listing directory page.
| CPE | Name | Operator | Version |
|---|---|---|---|
| min-http-server | le | 1.0.6 | |
| min-http-server | le | 1.0.6 |
Related
nodejs
nodejs
Cross-Site Scripting
2019-08-07 19:51:04
cvelist
cvelist
CVE-2019-5457
2019-07-30 20:22:28
github
github
Cross-Site Scripting in min-http-server
2019-07-31 04:22:27
nvd
nvd
CVE-2019-5457
2019-07-30 21:15:12
cve
cve
CVE-2019-5457
2019-07-30 21:15:12
prion
prion
Cross site scripting
2019-07-30 21:15:00
hackerone
hackerone
osv
osv
Cross-Site Scripting in min-http-server
2019-07-31 04:22:27