Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

2 records

Vendor: Mcstatic Project Component: Mcstatic Clear all filters
TI-2018-11824 CVE-2018-16482 · GHSA-cxmj-qjv6-vx9p

Path traversal in HackerOne mcstatic

Priority LOW 36

A server directory traversal vulnerability was found on node module mcstatic <=0.0.20 that would allow an attack to access sensitive information in the file system by appending slashes in the URL path.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01821 Published 2019-02-01 No fix listed CWE-22
TI-2018-02728 CVE-2018-3730 · GHSA-3r8f-gphx-9m2c

Path traversal in HackerOne mcstatic node module

Priority LOW 37

mcstatic node module suffers from a Path Traversal vulnerability due to lack of validation of filePath, which allows a malicious user to read content of any file with known path.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.02007 Published 2018-06-07 No fix listed CWE-22