Serve-static Project

Records1All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Serve-static Project records in CISA KEV

No Serve-static Project vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Serve-static 1 record LOW

Records

1 record in Serve-static · all components

TI-2015-01055 CVE-2015-1164 · GHSA-c3x7-gjmx-r2ff

Open redirect vulnerability in the serve-static plugin before 1.7.2 for Node.js, when…

LOW 25

Open redirect vulnerability in the serve-static plugin before 1.7.2 for Node.js, when mounted at the root, allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a // (slash sla…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.02616 Published 2015-01-21 Fixed in 1.7.2 CWE-601

Open these records in search →

Critical	0
High	0
Medium	1
Low	0
No CVSS	0