Directory Traversal

2018-06-0801:39:46

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

0.004 Low

EPSS

Percentile

74.8%

JSON

dcserver is vulnerable to directory traversal attacks. These attacks are possible by requesting a url such as /..%2f..%2fetc/passwd to get sensitive information.

CPENameOperatorVersion
dcservereq1.0.0

CPE	Name	Operator	Version
	dcserver	eq	1.0.0

References

github.com/JacksonGL/NPM-Vuln-PoC/blob/master/directory-traversal/dcserver

github.com/JacksonGL/NPM-Vuln-PoC/blob/master/directory-traversal/tiny-http

nodesecurity.io/advisories/393

0.004 Low

EPSS

Percentile

74.8%

JSON

Related for VERACODE:6684