Skip to content
OpenAdvisories

Product · HackerOne

statics-server

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 6.1
    CVE-2018-3771

    statics-server Cross-site Scripting vulnerability

    An XSS in statics-server <= 0.0.9 can be used via injected iframe in the filename when statics-server displays directory index in the browser.

    HackerOne statics-server statics-server npm