Skip to content
OpenAdvisories
Medium · 5.3 CVE-2018-3809 EUVD-2018-0232GHSA-686g-3xr3-x4x6

Information Exposure on Case Insensitive File Systems in serve

Published Jun 1, 2018 · Updated Sep 17, 2024 · Assigned by hackerone

Package: serve Ecosystem: npm

Description

Information exposure through directory listings in serve 6.5.3 allows directory listing and file access even when they have been set to be ignored.

Affected packages

EcosystemPackageAffectedFixedRecord
npm serve < 7.0.0 7.0.0 GHSA-686g-3xr3-x4x6

References