Lucene search
Veracode Vulnerability DatabaseVERACODE:20889HistoryJul 25, 2019 - 5:48 a.m.
Cross-site Scripting (XSS)
2019-07-2505:48:01
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
4
0.001 Low
EPSS
Percentile
24.8%
http-file-server is vulnerable to cross-site scripting (XSS) attack. It is possible because it does not handle the file name input from the user, allowing a malicious user to inject arbitrary script though it.
| CPE | Name | Operator | Version |
|---|---|---|---|
| http-file-server | le | 0.2.6 | |
| http-file-server | le | 0.2.6 |
References
Related
prion
prion
Cross site scripting
2019-07-30 21:15:00
cvelist
cvelist
CVE-2019-5458
2019-07-30 20:21:09
hackerone
hackerone
cve
cve
CVE-2019-5458
2019-07-30 21:15:12
osv
osv
Cross-Site Scripting in http-file-server
2019-07-31 04:22:36
nvd
nvd
CVE-2019-5458
2019-07-30 21:15:12
github
github
Cross-Site Scripting in http-file-server
2019-07-31 04:22:36
nodejs
nodejs
Cross-Site Scripting
2019-08-07 19:39:15