Lucene search
Veracode Vulnerability DatabaseVERACODE:21651HistoryOct 08, 2019 - 2:18 a.m.
Directory Traversal
2019-10-0802:18:26
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
6
EPSS
0.004
Percentile
75.2%
statics-server is vulnerable to directory traversal. The attack is possible using a symlink inside the project directory, allowing an attacker to read arbitrary file on the server.
References
Related
hackerone
hackerone
Node.js third-party modules: Path traversal using symlink
2019-09-16 07:54:32
nvd
nvd
CVE-2019-15596
2019-12-18 21:15:12
cve
cve
CVE-2019-15596
2019-12-18 21:15:12
osv
osv
Path Traversal in statics-server
2020-03-31 17:02:12
cvelist
cvelist
CVE-2019-15596
2019-12-18 20:59:06
github
github
Path Traversal in statics-server
2020-03-31 17:02:12
prion
prion
Path traversal
2019-12-18 21:15:00