Skip to content
OpenAdvisories
High CVE-2017-16124 EUVD-2018-0282GHSA-j38m-7q52-fgfh

Directory Traversal in node-server-forfront

Published Jun 7, 2018 · Updated Sep 16, 2024 · Assigned by hackerone

Description

node-server-forfront is a simple static file server. node-server-forfront is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the url.

Affected products

VendorProductAffectedFixed
HackerOne node-server-forfront node module All versions —

Affected packages

EcosystemPackageAffectedFixedRecord
npm node-server-forfront <= 0.10.7 — GHSA-j38m-7q52-fgfh

References