CVE-2018-16493

Опубликовано: 01 фев. 2019

Источник: nvd

CVSS3: 7.5

CVSS2: 5

EPSS Низкий

Описание

A path traversal vulnerability was found in module static-resource-server 1.7.2 that allows unauthorized read access to any file on the server by appending slashes in the URL.

Ссылки

https://hackerone.com/reports/432600
Exploit
Third Party Advisory
https://hackerone.com/reports/432600
Exploit
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:static-resource-server_project:static-resource-server:1.7.2:*:*:*:*:node.js:*:*

EPSS

Процентиль: 69%

0.00611

Низкий

7.5 High

CVSS3

5 Medium

CVSS2

Дефекты

CWE-548

CWE-22

Связанные уязвимости

GHSA-45j8-pm75-5v8x

github

около 7 лет назад

Path Traversal in simplehttpserver