Read the docs

M-server Project

Records2All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

M-server Project records in CISA KEV

No M-server Project vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
M-server 2 records LOW

Records

2 records in M-server · all components

TI-2018-11827 CVE-2018-16485 · GHSA-899g-6q6w-7v94

Path traversal in HackerOne m-server

Priority LOW 32

Path Traversal vulnerability in module m-server <1.4.1 allows malicious user to access unauthorized content of any file in the directory tree e.g.

CVSS 3.0MEDIUM 6.5 Network Low privileges No interaction EPSS 0.01333 Published 2019-02-01 Fixed in 1.4.1 CWE-22
TI-2018-11826 CVE-2018-16484 · GHSA-gmxv-xf2q-6j8m

Cross-site scripting in HackerOne m-server

Priority LOW 25

A XSS vulnerability was found in module m-server <1.4.2 that allows malicious Javascript code or HTML to be executed, due to the lack of escaping for special characters in folder names.

CVSS 3.0MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00606 Published 2019-02-01 Fixed in 1.4.2 CWE-79
Open these records in search →