GHSA-m273-wwfv-h6jpHigh

Directory Traversal in fancy-server

Published
August 31, 2020
Last Modified
January 9, 2023

🔗 CVE IDs covered (1)

CVE-2014-10066 →

📋 Description

Versions 0.1.4 and earlier of fancy-server are vulnerable to a directory traversal attack.

Standard attack vectors such as ../ will allow an attacker to read files outside of the served directory.

Recommendation

Upgrade to version 0.1.4 or greater.

🎯 Affected products1

  • npm/fancy-server:< 0.1.4

🔗 References (4)