GitHub Advisoryadvisory · npm

GHSA-74cp-qw7f-7hpw Path Traversal in statics-server

MEDIUM Published 2019-06-05 Modified 2020-08-31 Official page ↗
Ecosystem
npm
Packages
statics-server
Severity
Moderate
Weaknesses
CWE-22
Reviewed
2019-06-05

Affected packages

• npm statics-server: <= 0.0.9 (no fix yet)

Description

All versions of `statics-server` are vulnerable to Path Traversal. Due to insufficient input sanitization, attackers can access server files by using relative paths. Recommendation No fix is currently available. Consider using an alternative module until a fix is made available.

Related

Weakness · CWE (1)

  • CWE-22 Improper Limitation of a Pathname to a Restricted Directory weakness

References