Lucene search
Veracode Vulnerability DatabaseVERACODE:21366HistoryAug 26, 2019 - 2:53 a.m.
Directory Traversal
2019-08-2602:53:14
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
9
0.001 Low
EPSS
Percentile
48.5%
statichttpserver is vulnerable to directory traversal. The attack is possible because it does not validate the path name of URL and directly use it for web root. An attacker providing a path name ../ is allowed to list the chosen folder.
| CPE | Name | Operator | Version |
|---|---|---|---|
| statichttpserver | eq | 0.9.7 |
References
Related
nodejs
nodejs
Path Traversal
2019-09-04 15:32:53
github
github
Path Traversal in statichttpserver
2019-09-04 10:02:14
osv
osv
Path Traversal in statichttpserver
2019-09-04 10:02:14
prion
prion
Path traversal
2019-09-03 20:15:00
cve
cve
CVE-2019-5480
2019-09-03 20:15:11
cvelist
cvelist
CVE-2019-5480
2019-09-03 19:19:00
hackerone
hackerone
nvd
nvd
CVE-2019-5480
2019-09-03 20:15:11