Filtered by vendor Http-file-server Project
Subscribe
Filtered by product Http-file-server
Subscribe
Total
2 CVE
CVE | Vendors | Products | Updated | CVSS v2 | CVSS v3 |
---|---|---|---|---|---|
CVE-2019-5458 | 1 Http-file-server Project | 1 Http-file-server | 2024-11-21 | 3.5 LOW | 5.4 MEDIUM |
Cross-site scripting (XSS) vulnerability in http-file-server (all versions) allows an attacker with access to the server file system to execute arbitrary JavaScript code in victim's browser. | |||||
CVE-2019-5447 | 1 Http-file-server Project | 1 Http-file-server | 2024-11-21 | 5.0 MEDIUM | 5.3 MEDIUM |
A path traversal vulnerability in <= v0.2.6 of http-file-server npm module allows attackers to list files in arbitrary folders. |