Serve-here.js Project

Records1All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Serve-here.js Project records in CISA KEV

No Serve-here.js Project vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

1 record

TI-2019-03852 CVE-2019-5444 · GHSA-4448-rc82-fcr7

LOW 27

Path traversal vulnerability in version up to v1.1.3 in serve-here.js npm module allows attackers to list any file in arbitrary folder.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.01502 Published 2019-07-10 Fixed in 1.2.0 CWE-22