CVE-2014-10066CWE-22

Versions less than 0.1.4 of the static file server module fancy-server are vulnerable to directory traversal

published May 31, 2018

CVSS
—
EPSS
2%
Percentile
75.3
In the wild
Unconfirmed
What it is

Versions less than 0.1.4 of the static file server module fancy-server are vulnerable to directory traversal. An attacker can provide input such as `../` to read files outside of the served directory.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01582 · 75.3th percentile
Weakness
CWE-22 · Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
Published
2018-05-31T20:00Z
EPSS history
Timeline
  • 31 MAY 20:00Z
    Versions less than 0.1.4 of the static file server module fancy-server are vulnerable to directory traversal
    cvelistv5