Skip to content
OpenAdvisories
Medium · 5.3 CVE-2019-5444 EUVD-2021-1965GHSA-4448-rc82-fcr7

Path Traversal in serve-here.js

Published Jul 10, 2019 · Updated Aug 4, 2024 · Assigned by hackerone

Package: serve-here.js Ecosystem: npm

Description

Path traversal vulnerability in version up to v1.1.3 in serve-here.js npm module allows attackers to list any file in arbitrary folder.

Affected products

VendorProductAffectedFixed
— serve-here.js npm module Affected: up to v1.1.3, Fixed Version: 1.2.0 —

Affected packages

EcosystemPackageAffectedFixedRecord
npm serve-here.js < 1.2.0 1.2.0 GHSA-4448-rc82-fcr7

References