angular-http-server

2 results · Feed

• High 7.5
  GHSA-vmhw-fhj6-m3g5

  Path Traversal in angular-http-server

  Versions of `angular-http-server` before 1.4.4 are vulnerable to path traversal. ## Recommendation Update to version 1.4.4 or later.

  angular-http-server npm
  May 31, 2019
• Medium 6.5
  CVE-2018-3713

  Path Traversal in angular-http-server

  angular-http-server node module suffers from a Path Traversal vulnerability due to lack of validation of possibleFilename, which allows a malicious user to read content of any file with known path.

  HackerOne angular-http-server node module angular-http-server npm
  Jun 7, 2018