Directory Traversal

2018-06-0708:25:50

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

0.004 Low

EPSS

Percentile

74.8%

JSON

myserver.alexcthomas18 is vulnerable to directory traversal attacks. It is possible by requesting a URL such as /..%2f..%2fetc/passwd to get sensitive information.

CPENameOperatorVersion
myserver.alexcthomas18eq0.0.1

CPE	Name	Operator	Version
	myserver.alexcthomas18	eq	0.0.1

References

github.com/JacksonGL/NPM-Vuln-PoC/blob/master/directory-traversal/myserver.alexcthomas18

github.com/JacksonGL/NPM-Vuln-PoC/tree/master/directory-traversal/myserver.alexcthomas18

nodesecurity.io/advisories/469

0.004 Low

EPSS

Percentile

74.8%

JSON

Related for VERACODE:6632