Lucene search
Veracode Vulnerability DatabaseVERACODE:4096HistoryMay 02, 2017 - 10:40 a.m.
Directory Traversal
2017-05-0210:40:21
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
3
0.007 Low
EPSS
Percentile
79.5%
sencisho is vulnerable to directory traversal attacks. A malicious user can prepend /..%2f..%2f in a directory string to disclose the files in a target directory.
References
github.com/JacksonGL
github.com/JacksonGL/NPM-Vuln-PoC/tree/master/directory-traversal/sencisho
github.com/julien/sencisho/commit/4254c85823fd0bbb0e8a53dc5a8e4f126639893d
github.com/julien/sencisho/compare/deda6fea60033a42fe4aa0342b0fdd8bc5692a24...3cb7fbb942a6adb7cb3cb01641bab305114f2d5c
nodesecurity.io/advisories/340
Related
cve
cve
CVE-2017-16092
2018-06-07 02:29:01
nodejs
nodejs
Directory Traversal
2017-05-02 23:33:03
prion
prion
Directory traversal
2018-06-07 02:29:00
cvelist
cvelist
CVE-2017-16092
2018-04-26 00:00:00
github
github
Directory Traversal in sencisho
2018-07-24 13:50:01
nvd
nvd
CVE-2017-16092
2018-06-07 02:29:01
osv
osv
Directory Traversal in sencisho
2018-07-24 13:50:01