Geddyjs

Records1All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Geddyjs records in CISA KEV

No Geddyjs vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Geddy 1 record LOW

Records

1 record in Geddy · all components

TI-2015-04794 CVE-2015-5688 · GHSA-333x-9vgq-v2j4

Directory traversal vulnerability in lib/app/index.js in Geddy before 13.0.8 for Node.js…

LOW 35

Directory traversal vulnerability in lib/app/index.js in Geddy before 13.0.8 for Node.js allows remote attackers to read arbitrary files via a ..%2f (dot dot encoded slash) in the PATH_INFO to the default URI.

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.09385 Published 2015-09-04 Fixed in 13.0.8 CWE-22

Open these records in search →

Critical	0
High	0
Medium	1
Low	0
No CVSS	0