Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:6185
HistoryApr 25, 2018 - 2:59 a.m.

Directory Traversal

2018-04-2502:59:36
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
6

0.004 Low

EPSS

Percentile

75.2%

mcstatic is vulnerable to directory traversal attacks. The vulnerability exists due to the lack of sanitization of the file name from req.url, allowing malicious users to perform directory traversal attacks.

CPENameOperatorVersion
mcstaticle0.0.20
mcstaticle0.0.20

0.004 Low

EPSS

Percentile

75.2%