Skip to content
Sign in
7.5 High

CVE-2022-21192 All versions of the package serve-lite are vulnerable to Directory Traversal due to missing input sanitization or…

Description

All versions of the package serve-lite are vulnerable to Directory Traversal due to missing input sanitization or other checks and protections employed to the req.url passed as-is to path.join().

Affected products and versions

Product Affected versions Fixed in
serve-lite Versions not published

Other CVEs of serve-lite

The 2 CVEs of serve-lite →
CVE-2022-25847 All versions of the package serve-lite are vulnerable to Cross-site Scripting (XSS) because when it detects a request to… 5.4 Medium
Track this CVE