Skip to content
OpenAdvisories
High · 7.5 CVE-2017-16182 EUVD-2018-0332GHSA-wh33-4p32-g7vh

Directory Traversal in serverxxx

Published Jun 7, 2018 · Updated Sep 16, 2024 · Assigned by hackerone

Description

serverxxx is a static file server. serverxxx is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the url.

Affected products

VendorProductAffectedFixed
HackerOne serverxxx node module All versions —

Affected packages

EcosystemPackageAffectedFixedRecord
npm serverxxx <= 1.0.0 — GHSA-wh33-4p32-g7vh

References