Description
All versions of the static file server module nhouston are vulnerable to directory traversal. An attacker can provide input such as ../ to read files outside of the served directory.
Recommendation
No fix is available yet. Followings are affected versions:
- >= 0.0.0
References
- GHSA-44g9-w23c-5rw7
- www.npmjs.com
- en.wikipedia.org
- snyk.io
- CVE-2014-8883
- CWE-23
- CAPEC-310
- OWASP 2021-A1
- OWASP 2021-A6
Related Issues
- lobe-chat has an Open Redirect - CVE-2025-59426
- Cross-site Scripting in cesium - CVE-2023-48094
- Command Injection in node-rules - Vulnerability
- Cross-site Scripting in epubjs - CVE-2021-33040
- Tags:
- npm
- nhouston
Anything's wrong? Let us know Last updated on January 09, 2023