Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Vendor: M-server Project Clear all filters
TI-2018-11827 CVE-2018-16485 · GHSA-899g-6q6w-7v94

Path traversal in HackerOne m-server

Priority LOW 32

Path Traversal vulnerability in module m-server <1.4.1 allows malicious user to access unauthorized content of any file in the directory tree e.g.

CVSS 3.0MEDIUM 6.5 Network Low privileges No interaction EPSS 0.01333 Published 2019-02-01 Fixed in 1.4.1 CWE-22
TI-2018-11826 CVE-2018-16484 · GHSA-gmxv-xf2q-6j8m

Cross-site scripting in HackerOne m-server

Priority LOW 25

A XSS vulnerability was found in module m-server <1.4.2 that allows malicious Javascript code or HTML to be executed, due to the lack of escaping for special characters in folder names.

CVSS 3.0MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00606 Published 2019-02-01 Fixed in 1.4.2 CWE-79