Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:25958
HistoryJul 27, 2020 - 4:15 a.m.

Directory Traversal

2020-07-2704:15:41
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
3

0.006 Low

EPSS

Percentile

79.3%

fast-http is vulnerable to directory traversal. Lack of path sanitization in the fs.readfile function in index.js allows an attacker to access arbitrary files outside of the web root.

CPENameOperatorVersion
fast-httple0.1.3
fast-httple0.1.3

0.006 Low

EPSS

Percentile

79.3%

Related for VERACODE:25958