Http-file-server Project - vulnerabilities (CVEs)

2 CVEs in 1 products, 0 in the last 30 days, newest from 2019-07-30.

Products

• Http-file-server - 2 CVEs

Newest CVEs of Http-file-server Project

• CVE-2019-5458 - CVSS 5.4 (medium), 2019-07-30: Cross-site scripting (XSS) vulnerability in http-file-server (all versions) allows an attacker with access to the server file system to execute arbitrary…
• CVE-2019-5447 - CVSS 5.3 (medium), 2019-07-15: A path traversal vulnerability in <= v0.2.6 of http-file-server npm module allows attackers to list files in arbitrary folders.