Read the docs

Http-file-server Project

Records2All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

Http-file-server Project records in CISA KEV

No Http-file-server Project vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Http-file-server 2 records LOW

Records

2 records in Http-file-server · all components

TI-2019-03855 CVE-2019-5447 · GHSA-2mp5-m968-gwr2

Path traversal in http-file-server

Priority LOW 27

A path traversal vulnerability in <= v0.2.6 of http-file-server npm module allows attackers to list files in arbitrary folders.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.01502 Published 2019-07-15 No fix listed CWE-22
TI-2019-03866 CVE-2019-5458 · GHSA-7j93-2h6r-hm49

Cross-site scripting in http-file-server

Priority LOW 26

Cross-site scripting (XSS) vulnerability in http-file-server (all versions) allows an attacker with access to the server file system to execute arbitrary JavaScript code in victim's browser.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00709 Published 2019-07-30 No fix listed CWE-79
Open these records in search →