~ / search / GHSA-52r9-g5g6-2hjp

GHSA-52r9-g5g6-2hjp

Path Traversal in node-srv

Source: GitHub Advisory Database (reviewed) Moderate CVE-2018-3714

Packages

EcosystemPackageAffectedFixed in
npm node-srv < 2.1.1 2.1.1

Details

As written in the advisory (Markdown source, shown as plain text).

Versions of `node-srv` before 2.1.1 are vulnerable to path traversal allowing a remote attacker to read files from the server that uses `node-srv`. ## Recommendation Update to version 2.1.1 or later.

References

External links from the advisory. They lead to third-party sites.