TI-2019-03827 CVE-2019-5417 · GHSA-xg75-3277-gvvj
Path traversal in serve
Priority LOW 37
A path traversal vulnerability in serve npm package version 7.0.1 allows the attackers to read content of arbitrary files on the remote server.
zeit
Records9All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high4CVSS 7.0–8.9
Exploited now
zeit records in CISA KEVNo zeit vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsRecords
5 records in Serve · all components
TI-2019-03825 CVE-2019-5415 · GHSA-v588-qcp3-jv46
Improper privilege management in serve
Priority LOW 36
A bug in handling the ignore files and directories feature in serve 6.5.3 allows an attacker to read a file or list the directory that the victim has not allowed access to.
TI-2018-02710 CVE-2018-3712 · GHSA-q2qh-cgc2-qhr3
Path traversal in HackerOne serve node module
Priority LOW 32
serve node module before 6.4.9 suffers from a Path Traversal vulnerability due to not handling %2e (.) and %2f (/) and allowing them in paths, which allows a malicious user to view the contents of any directory with know…
TI-2018-02716 CVE-2018-3718 · GHSA-5rc4-8qqh-vq7f
serve node module suffers from Improper Handling of URL Encoding by permitting access to…
Priority LOW 27
serve node module suffers from Improper Handling of URL Encoding by permitting access to ignored files if a filename is URL encoded.
TI-2018-02781 CVE-2018-3809 · GHSA-686g-3xr3-x4x6
Information exposure through directory listings in serve 6.5.3 allows directory listing…
Priority LOW 26
Information exposure through directory listings in serve 6.5.3 allows directory listing and file access even when they have been set to be ignored.