Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:40520
HistoryMay 15, 2023 - 4:52 a.m.

Path Traversal

2023-05-1504:52:47
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
7
m.static
path traversal
improper path sanitization
requestfile parameter
requestlistener function
index.js

0.001 Low

EPSS

Percentile

38.1%

m.static is vulnerable to Path Traversal. The vulnerability exists due to the improper path sanitization in the requestFile parameter in the requestListener function of index.js, which allows an attacker to access files outside the expected directory through relative paths.

CPENameOperatorVersion
m.staticle2.2.0
m.staticle2.2.0

0.001 Low

EPSS

Percentile

38.1%

Related for VERACODE:40520