Read the docs

Localhost-now Project

Records2All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high2CVSS 7.0–8.9

Exploited now

Localhost-now Project records in CISA KEV

No Localhost-now Project vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Localhost-now 2 records LOW

Records

2 records

TI-2019-03826 CVE-2019-5416 · GHSA-qwj8-p662-3m7x

Path traversal in localhost-now

Priority LOW 37

A path traversal vulnerability in localhost-now npm package version 1.0.2 allows the attackers to read content of arbitrary files on the remote server.

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.0221 Published 2019-03-17 No fix listed CWE-22
TI-2018-02727 CVE-2018-3729 · GHSA-2gjg-5x33-mmp2

Path traversal in HackerOne localhost-now node module

Priority LOW 37

localhost-now node module suffers from a Path Traversal vulnerability due to lack of validation of file, which allows a malicious user to read content of any file with known path.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.0199 Published 2018-06-07 Fixed in 1.0.2 CWE-22
Open these records in search →