Lucene search
Veracode Vulnerability DatabaseVERACODE:5931HistoryMar 16, 2018 - 2:49 a.m.
Information Disclosure
2018-03-1602:49:45
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
6
0.001 Low
EPSS
Percentile
47.8%
serve is vulnerable to information disclosure attacks. If the --ignore flag is used, attackers can identify whether or not a file is present on the server. These attacks are possible by encoding a letter of the filepath that you wish to check the presence of.
Related
veracode
veracode
Directory Traversal
2019-06-19 03:12:46
osv
osv
CVE-2018-3718
2018-06-07 02:29:08
vercel/serve allows access to restricted files if filename is URL encoded.
2021-08-09 22:24:26
nvd
nvd
CVE-2018-3718
2018-06-07 02:29:08
prion
prion
Code injection
2018-06-07 02:29:00
github
github
vercel/serve allows access to restricted files if filename is URL encoded.
2021-08-09 22:24:26
hackerone
hackerone
cve
cve
CVE-2018-3718
2018-06-07 02:29:08
cvelist
cvelist
CVE-2018-3718
2018-04-26 00:00:00