Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:38546
HistoryDec 21, 2022 - 2:29 a.m.

Directory Traversal

2022-12-2102:29:53
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
7
directory traversal
input sanitization
index.js
easy-static-server

EPSS

0.001

Percentile

50.4%

easy-static-server is vulnerable to directory traversal. The vulnerability exists in the easyServer function of index.js due to missing input sanitization which allows an attacker to access files and directories that are stored outside the intended folder via req.url.

EPSS

0.001

Percentile

50.4%

Related for VERACODE:38546