Lucene search
Veracode Vulnerability DatabaseVERACODE:20772HistoryJul 11, 2019 - 6:01 a.m.
Directory Traversal
2019-07-1106:01:17
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
7
0.001 Low
EPSS
Percentile
48.3%
http-file-server is vulnerable to directory traversal. It does not prevent the use of ../ in the path name of URL, allowing an attacker to list any files or folder in another folder of web root.
| CPE | Name | Operator | Version |
|---|---|---|---|
| http-file-server | eq | 0.2.6 | |
| http-file-server | eq | 0.2.6 |
References
Related
osv
osv
Path Traversal in http-file-server
2019-07-16 00:41:34
prion
prion
Path traversal
2019-07-15 18:15:00
hackerone
hackerone
cvelist
cvelist
CVE-2019-5447
2019-07-15 17:57:34
cve
cve
CVE-2019-5447
2019-07-15 18:15:12
nodejs
nodejs
Path Traversal
2019-07-17 20:57:43
nvd
nvd
CVE-2019-5447
2019-07-15 18:15:12
github
github
Path Traversal in http-file-server
2019-07-16 00:41:34