Skip to content
OpenAdvisories
Medium · 5.3 CVE-2018-16478 EUVD-2018-0822GHSA-vwr2-wj63-86gr

Path Traversal in simplehttpserver

Published Dec 4, 2018 · Updated Aug 5, 2024 · Assigned by hackerone

Description

A Path Traversal in simplehttpserver versions <=0.2.1 allows to list any file in another folder of web root.

Affected products

VendorProductAffectedFixed
— simplehttpserver Not Fixed —

Affected packages

EcosystemPackageAffectedFixedRecord
npm simplehttpserver <= 0.3.0 — GHSA-vwr2-wj63-86gr

References