Directory Traversal

2017-07-2602:19:06

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

0.004 Low

EPSS

Percentile

73.8%

JSON

appserver-io/http is vulnerable to directory traversal attacks. Attackers are able to access file outside of the intended directory by using .. within a URL.

CPENameOperatorVersion
appserver-io/httple1.1.0

CPE	Name	Operator	Version
	appserver-io/http	le	1.1.0

References

appserver.io/security/2015/03/31/traversal-directory-vulnerability-in-webserver.html

github.com/appserver-io/http/commit/1fc2b608c7c0a45384ef88de32e474ee958db5e5

0.004 Low

EPSS

Percentile

73.8%

JSON

Related for VERACODE:4680