Lucene search
Veracode Vulnerability DatabaseVERACODE:13296HistoryFeb 04, 2019 - 2:25 a.m.
Directory Traversal
2019-02-0402:25:20
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
2
0.002 Low
EPSS
Percentile
64.7%
mcstatic is vulnerable to directory traversal. The vulnerability is possible because it does not handle the file name parameter properly, allowing the attacker to read arbitrary files on the target server by appending ../ in the file path.
References
Related
osv
osv
mcstatic directory traversal vulnerability
2019-02-07 18:15:44
github
github
mcstatic directory traversal vulnerability
2019-02-07 18:15:44
cvelist
cvelist
CVE-2018-16482
2019-02-01 18:00:00
nvd
nvd
CVE-2018-16482
2019-02-01 18:29:00
cve
cve
CVE-2018-16482
2019-02-01 18:29:00
prion
prion
Directory traversal
2019-02-01 18:29:00
hackerone
hackerone
Node.js third-party modules: [mcstatic] Server Directory Traversal
2018-03-27 09:25:33