NetSight
medium5.3

CVE-2015-8859

The send package before 0.11.1 for Node.js allows attackers to obtain the root path via unspecified vectors.

Impact

The send package before 0.11.1 for Node.js allows attackers to obtain the root path via unspecified vectors.

Affected products

VendorProductAffected versions
Send ProjectSend
before 0.11.1

References