GHSA-pcvv-rm69-6cv3HighCVSS 7.5
Servor 1.0.0 through 4.0.2 contains a path traversal vulnerability that allows unauthenticated...
🔗 CVE IDs covered (1)
📋 Description
Servor 1.0.0 through 4.0.2 contains a path traversal vulnerability that allows unauthenticated remote attackers to escape the served root by sending URL-encoded dot segments. Attackers can send %2e%2e/ sequences, which decodeURI() decodes before path.join() in serveStaticFile and serveDirectoryListing, to read arbitrary files and list directories outside the root.
🔗 References (6)
- https://nvd.nist.gov/vuln/detail/CVE-2021-48011
- https://github.com/lukejacksonn/servor/pull/70
- https://github.com/lukejacksonn/servor/commit/ec7d824ea6903c0fb97a452045bbb8335198cbab
- https://github.com/lukejacksonn/servor
- https://www.vulncheck.com/advisories/servor-1.0.0-through-4.0.2-unauthenticated-path-traversal-via-url-encoded-dot-segments
- https://github.com/advisories/GHSA-pcvv-rm69-6cv3