CVE-2019-5480

A path traversal vulnerability in <= v0.9.7 of statichttpserver npm module allows attackers to list files in arbitrary folders.

Score

CVSS 3.0 5.3 Medium

Status

Modified - support@hackerone.com

Published

2019-09-03

Last modified

2024-08-04

Weaknesses

CWE-22

Affected products

• Statichttpserver (Statichttpserver Project)

References

• https://hackerone.com/reports/570035