Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:39610
HistoryMar 09, 2023 - 6:05 p.m.

Directory Traversal

2023-03-0918:05:49
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
10
directory traversal
node-static
vulnerability
remote attacker
improper file path
sanitization

EPSS

0.001

Percentile

46.4%

node-static is vulnerable to Directory Traversal. The vulnerability exists due to the servePath function in node-static.js, which allows a remote attacker to access restricted data outside the intended directory due to improper file path sanitization.

EPSS

0.001

Percentile

46.4%

Related for VERACODE:39610