Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:6185
HistoryApr 25, 2018 - 2:59 a.m.

Directory Traversal

2018-04-2502:59:36
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
7

EPSS

0.004

Percentile

75.2%

mcstatic is vulnerable to directory traversal attacks. The vulnerability exists due to the lack of sanitization of the file name from req.url, allowing malicious users to perform directory traversal attacks.

EPSS

0.004

Percentile

75.2%