CVEDB API

A path traversal vulnerability in <= v0.9.7 of statichttpserver npm module allows attackers to list files in arbitrary folders.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.003

EPSS Ranking 54.2%

CVSS Severity

CVSS v3 Score 5.3

CVSS v2 Score 5.0

References

Products affected by CVE-2019-5480

Statichttpserver Project » Statichttpserver » Version: N/A

cpe:2.3:a:statichttpserver_project:statichttpserver:-
Statichttpserver Project » Statichttpserver » Version: 0.9.0

cpe:2.3:a:statichttpserver_project:statichttpserver:0.9.0
Statichttpserver Project » Statichttpserver » Version: 0.9.1

cpe:2.3:a:statichttpserver_project:statichttpserver:0.9.1
Statichttpserver Project » Statichttpserver » Version: 0.9.2

cpe:2.3:a:statichttpserver_project:statichttpserver:0.9.2
Statichttpserver Project » Statichttpserver » Version: 0.9.3

cpe:2.3:a:statichttpserver_project:statichttpserver:0.9.3
Statichttpserver Project » Statichttpserver » Version: 0.9.4

cpe:2.3:a:statichttpserver_project:statichttpserver:0.9.4
Statichttpserver Project » Statichttpserver » Version: 0.9.5

cpe:2.3:a:statichttpserver_project:statichttpserver:0.9.5
Statichttpserver Project » Statichttpserver » Version: 0.9.6

cpe:2.3:a:statichttpserver_project:statichttpserver:0.9.6
Statichttpserver Project » Statichttpserver » Version: 0.9.7

cpe:2.3:a:statichttpserver_project:statichttpserver:0.9.7