Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:30528
HistoryMay 19, 2021 - 3:18 a.m.

Path Traversal

2021-05-1903:18:39
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
3

0.003 Low

EPSS

Percentile

68.4%

rollup-plugin-serve is vulnerable to path traversal. The readFile operation does not escape the urlPath, allowing an attacker to input malicious characters to access files and directories that are outside the destination folder.

0.003 Low

EPSS

Percentile

68.4%