Vulnerabilities

CVE-2019-5444 | BDVDB-2026-118973 Detail

serve-here.js npm module

Description#

Path traversal vulnerability in version up to v1.1.3 in serve-here.js npm module allows attackers to list any file in arbitrary folder.

Impact#

No impact statement in the source data.

Weaknesses#

CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

References#

https://hackerone.com/reports/569966

Exploit#

No public exploit known

History#

Version 12019-07-10Record published in the CVE List.
Version 22024-08-04Most recent update recorded in the CVE List.