Directory Traversal

2018-06-0715:26:20

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

0.007 Low

EPSS

Percentile

79.6%

JSON

tiny-http is vulnerable to directory traversal attacks. This is possible by requesting a url such as /..%2f..%2fetc/passwd to get sensitive information.

CPENameOperatorVersion
tiny-httple2.0.8

CPE	Name	Operator	Version
	tiny-http	le	2.0.8

References

github.com/JacksonGL

github.com/JacksonGL/NPM-Vuln-PoC/blob/master/directory-traversal/tiny-http

github.com/JacksonGL/NPM-Vuln-PoC/tree/master/directory-traversal/tiny-http

nodesecurity.io/advisories/342

0.007 Low

EPSS

Percentile

79.6%

JSON

Related for VERACODE:6660