Easy-static-server Project

Records1All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

Easy-static-server Project records in CISA KEV

No Easy-static-server Project vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Easy-static-server 1 record HIGH

Records

1 record in Easy-static-server · all components

TI-2022-09476 CVE-2022-25931 · GHSA-wcwm-c3mr-pxcr

Directory traversal in easy-static-server

HIGH 72

All versions of package easy-static-server are vulnerable to Directory Traversal due to missing input sanitization and sandboxes being employed to the req.url user input that is passed to the server code.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01413 Published 2022-12-21 No fix listed CWE-22

Open these records in search →

Critical	0
High	1
Medium	0
Low	0
No CVSS	0