Simplehttpserver Project

Records3All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

Simplehttpserver Project records in CISA KEV

No Simplehttpserver Project vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

3 records in Simplehttpserver · all components

TI-2018-02780 CVE-2018-3787 · GHSA-gpvj-q7fp-jcch

LOW 37

Path traversal in simplehttpserver <v0.2.1 allows listing any file on the server.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.02038 Published 2018-08-31 Fixed in 0.2.1 CWE-22

TI-2018-11820 CVE-2018-16478 · GHSA-vwr2-wj63-86gr

LOW 27

A Path Traversal in simplehttpserver versions <=0.2.1 allows to list any file in another folder of web root.

CVSS 3.0MEDIUM 5.3 Network No auth No interaction EPSS 0.01295 Published 2018-12-04 No fix listed CWE-22

TI-2018-02714 CVE-2018-3716 · GHSA-jrhj-2j3q-xf3v

LOW 25

simplehttpserver node module suffers from a Cross-Site Scripting vulnerability to a lack of validation of file names.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00633 Published 2018-06-07 Fixed in 0.1.0 CWE-79