CVE-2014-10068

The inert directory handler in inert node module before 1.1.1 always allows files in hidden directories to be served, even when `showHidden` is false.

Score

CVSS 3.1 7.5 High

Status

Modified - support@hackerone.com

Published

2018-05-29

Last modified

2024-09-17

Weaknesses

CWE-22

Affected products

• Inert Node Module (Hackerone)
• Inert (Hapi)

References

• https://github.com/hapijs/inert/commit/e8f99f94da4cb08e8032eda984761c3f111e3e82
• https://github.com/hapijs/inert/pull/15
• https://nodesecurity.io/advisories/14