CVE-2015-1164 | BDVDB-2026-67619 Detail

Description#

Open redirect vulnerability in the serve-static plugin before 1.7.2 for Node.js, when mounted at the root, allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a // (slash slash) followed by a domain in the PATH_INFO to the default URI.

Impact#

Weaknesses#

References#

Exploit#

History#

1. Version 12015-01-21Record published in the CVE List.
2. Version 22024-08-06Most recent update recorded in the CVE List.