Skip to content
OpenAdvisories
Medium · 5.3 CVE-2019-5480 EUVD-2019-0646GHSA-2j5x-56p6-hj6x

Path Traversal in statichttpserver

Published Sep 3, 2019 · Updated Aug 4, 2024 · Assigned by hackerone

Description

A path traversal vulnerability in <= v0.9.7 of statichttpserver npm module allows attackers to list files in arbitrary folders.

Affected products

VendorProductAffectedFixed
— statichttpserver Not fixed —

Affected packages

EcosystemPackageAffectedFixedRecord
npm statichttpserver <= 0.9.7 — GHSA-2j5x-56p6-hj6x

References