Skip to content
OpenAdvisories

Product · HackerOne

fancy-server node module

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High —
    CVE-2014-10066

    Directory Traversal in fancy-server

    Versions less than 0.1.4 of the static file server module fancy-server are vulnerable to directory traversal. An attacker can provide input such as `../` to read files outside of the served directory.

    HackerOne fancy-server node module fancy-server npm