Read the docs

Static-resource-server Project

Records1All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9

Exploited now

Static-resource-server Project records in CISA KEV

No Static-resource-server Project vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Static-resource-server 1 record LOW

Records

1 record

TI-2018-11834 CVE-2018-16493 · GHSA-45j8-pm75-5v8x

Path traversal in HackerOne static-resource-server

Priority LOW 36

A path traversal vulnerability was found in module static-resource-server 1.7.2 that allows unauthorized read access to any file on the server by appending slashes in the URL.

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.01764 Published 2019-02-01 No fix listed CWE-548
Open these records in search →