medium5.3
CVE-2019-5447
A path traversal vulnerability in <= v0.2.6 of http-file-server npm module allows attackers to list files in arbitrary folders.
Impact
A path traversal vulnerability in <= v0.2.6 of http-file-server npm module allows attackers to list files in arbitrary folders.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Http-File-Server Project | Http-File-Server | through 0.2.6 |