GitHub Advisoryadvisory · npm

GHSA-hqv3-qq72-78cv Directory Traversal in startserver

HIGH Published 2021-09-02 Modified 2021-08-25 Official page ↗

Aliases: CVE-2021-23430
Ecosystem: npm
Packages: startserver
Severity: High
CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Weaknesses: CWE-22
Reviewed: 2021-08-25

Affected packages

• npm startserver: <= 1.4.1 (no fix yet)

Description

All versions of package startserver are vulnerable to Directory Traversal due to missing sanitization.

Related

Alias · CVE (1)

CVE-2021-23430 All versions of package startserver are vulnerable to Directory Traversal due to missing sanitization. vulnerability

Weakness · CWE (1)

CWE-22 Improper Limitation of a Pathname to a Restricted Directory weakness

References