Vulnerabilities

TI-2018-11820 CVE-2018-16478 · GHSA-vwr2-wj63-86gr

A Path Traversal in simplehttpserver versions <=0.2.1 allows to list any file in another folder of web root.

LOW 27

A Path Traversal in simplehttpserver versions <=0.2.1 allows to list any file in another folder of web root.

CVSS 3.0MEDIUM 5.3 Network No auth No interaction EPSS 0.01295 Published 2018-12-04 No fix listed CWE-22

TI-2018-02780 CVE-2018-3787 · GHSA-gpvj-q7fp-jcch

LOW 37

Path traversal in simplehttpserver <v0.2.1 allows listing any file on the server.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.02038 Published 2018-08-31 Fixed in 0.2.1 CWE-22

TI-2018-02714 CVE-2018-3716 · GHSA-jrhj-2j3q-xf3v

LOW 25

simplehttpserver node module suffers from a Cross-Site Scripting vulnerability to a lack of validation of file names.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00633 Published 2018-06-07 Fixed in 0.1.0 CWE-79