Read the docs

Serverless Offline Project

Records1All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

Serverless Offline Project records in CISA KEV

No Serverless Offline Project vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Records

1 record

Priority MEDIUM 45

Serverless Offline 8.0.0 returns a 403 HTTP status code for a route that has a trailing / character, which might cause a developer to implement incorrect access control, because the actual behavior within the Amazon AWS…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0146 Published 2021-08-10 No fix listed CWE-755
Open these records in search →