Vulnerabilities (CVE)

Filtered by vendor Simplehttpserver Project Subscribe
Filtered by product Simplehttpserver
Total 3 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2018-16478 1 Simplehttpserver Project 1 Simplehttpserver 2024-02-28 5.0 MEDIUM 5.3 MEDIUM
A Path Traversal in simplehttpserver versions <=0.2.1 allows to list any file in another folder of web root.
CVE-2018-3787 1 Simplehttpserver Project 1 Simplehttpserver 2024-02-28 5.0 MEDIUM 7.5 HIGH
Path traversal in simplehttpserver <v0.2.1 allows listing any file on the server.
CVE-2018-3716 1 Simplehttpserver Project 1 Simplehttpserver 2024-02-28 3.5 LOW 5.4 MEDIUM
simplehttpserver node module suffers from a Cross-Site Scripting vulnerability to a lack of validation of file names.