Skip to content
OpenAdvisories

Product · HackerOne

serve node module

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 6.5
    CVE-2018-3712

    Directory Traversal in serve

    serve node module before 6.4.9 suffers from a Path Traversal vulnerability due to not handling %2e (.) and %2f (/) and allowing them in paths, which allows a malicious user to view the contents of any directory with known path.

    HackerOne serve node module serve npm
  • Medium 5.3
    CVE-2018-3718

    vercel/serve allows access to restricted files if filename is URL encoded.

    serve node module suffers from Improper Handling of URL Encoding by permitting access to ignored files if a filename is URL encoded.

    HackerOne serve node module serve npm