Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:7684
HistoryNov 05, 2018 - 3:12 a.m.

Directory Traversal

2018-11-0503:12:44
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
1

0.009 Low

EPSS

Percentile

82.8%

knightjs is vulnerable to a directory traversal attack. The library does not sanitize incoming HTTP requests, allowing a malicious user to pass a HTTP request with a pathname containing ../ to traverse the directory and access sensitive information.

CPENameOperatorVersion
knightjseq0.0.1

0.009 Low

EPSS

Percentile

82.8%