statics-server@0.0.8 vulnerabilities
This is another static server
-
latest version
0.0.9
-
first published
8 years ago
-
latest version published
8 years ago
-
licenses detected
- >=0
Direct Vulnerabilities
Known vulnerabilities in the statics-server package. This does not include vulnerabilities belonging to this package’s dependencies.
Automatically find and fix vulnerabilities affecting your projects. Snyk scans for vulnerabilities and provides fixes for free.Vulnerability | Vulnerable Version |
---|---|
statics-server is an allows you to run statics servers. Affected versions of this package are vulnerable to Directory Traversal. It is possible to read arbitrary files from a server by creating a symbolic link and linking it to a file outside of the server's public directory. PoC by 0xche
How to fix Directory Traversal? There is no fixed version for |
*
|
statics-server allows you to run statics servers. Affected versions of this package are vulnerable to Directory Traversal.
Attackers can access server files by using relative paths due to insufficient input sanitisation. Attackers may be able to read critical files including How to fix Directory Traversal? There is no fixed version for |
*
|
Affected versions of statics-server are vulnerable to Cross-site Scripting (XSS) attacks.
It does not implement any HTML escaping when displays directory index in the browser. Variable How to fix Cross-site Scripting (XSS)? There is no fix version for |
*
|