Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Vendor: Localhost-now Project Clear all filters
TI-2019-03826 CVE-2019-5416 · GHSA-qwj8-p662-3m7x

Path traversal in localhost-now

Priority LOW 37

A path traversal vulnerability in localhost-now npm package version 1.0.2 allows the attackers to read content of arbitrary files on the remote server.

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.0221 Published 2019-03-17 No fix listed CWE-22
TI-2018-02727 CVE-2018-3729 · GHSA-2gjg-5x33-mmp2

Path traversal in HackerOne localhost-now node module

Priority LOW 37

localhost-now node module suffers from a Path Traversal vulnerability due to lack of validation of file, which allows a malicious user to read content of any file with known path.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.0199 Published 2018-06-07 Fixed in 1.0.2 CWE-22