Privilege Escalation

2021-08-1102:34:01

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

privilege escalation

serverless-offline

createauthscheme

createauthscheme.js

access control

http status code

web content

malicious url

EPSS

0.007

Percentile

80.7%

JSON

serverless-offline is vulnerable to privilege escalation. The vulnerability exists in createAuthScheme function of createAuthScheme.js due to an insecure access control from a misinterpreted HTTP status code which allows an attacker to download a web content page via malicious URL.