Aller au contenu
Se connecter
7.5 Élevée

CVE-2022-21192 All versions of the package serve-lite are vulnerable to Directory Traversal due to missing input sanitization or…

Description

All versions of the package serve-lite are vulnerable to Directory Traversal due to missing input sanitization or other checks and protections employed to the req.url passed as-is to path.join().

Produits et versions touchés

Produit Versions touchées Corrigé en
serve-lite Versions non publiées

Autres CVE de serve-lite

Les 2 CVE de serve-lite →
CVE-2022-25847 All versions of the package serve-lite are vulnerable to Cross-site Scripting (XSS) because when it detects a request to… 5.4 Moyenne
Suivre cette CVE