Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:38563
HistoryDec 22, 2022 - 6:56 a.m.

Path Traversal

2022-12-2206:56:29
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
6
lite-dev-server
path traversal
vulnerability
server.js
dot-dot-slash sequences
arbitrary files.

0.001 Low

EPSS

Percentile

50.9%

lite-dev-server is vulnerable to path traversal. The vulnerability exists in server.js because it aims to access files and directories that are stored outside the intended folder. By manipulating files with dot-dot-slash (../) sequences and its variations it may be possible to access arbitrary files and directories stored on the file system.

0.001 Low

EPSS

Percentile

50.9%

Related for VERACODE:38563