Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:6398
HistoryMay 28, 2018 - 6:15 a.m.

Directory Traversal

2018-05-2806:15:19
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
4

0.005 Low

EPSS

Percentile

76.7%

html-pages is vulnerable to directory traversal attacks. A malicious user can obtain access to files on the system by prepending ../ in the url or curl request such as $ curl -v --path-as-is http://127.0.0.1:8000/../../../../../etc/passwd

0.005 Low

EPSS

Percentile

76.7%