CVE-2014-3744

Directory traversal vulnerability in the st module before 0.2.5 for Node.js allows remote attackers to read arbitrary files via a %2e%2e (encoded dot dot) in…

published October 23, 2017

CVSS
—
EPSS
34%
Percentile
98.4
In the wild
Unconfirmed
What it is

Directory traversal vulnerability in the st module before 0.2.5 for Node.js allows remote attackers to read arbitrary files via a %2e%2e (encoded dot dot) in an unspecified path.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.34012 · 98.4th percentile
Published
2017-10-23T18:00Z
EPSS history
Timeline
  • 22 SEP 03:10Z
    EPSS moved 34% → 17%
    epss
  • 06 SEP 03:07Z
    EPSS moved 34% → 17%
    epss
  • 30 AUG 15:28Z
    EPSS moved 17% → 34%
    epss
  • 29 AUG 03:55Z
    EPSS moved 34% → 17%
    epss
  • 23 OCT 18:00Z
    Directory traversal vulnerability in the st module before 0.2.5 for Node.js allows remote attackers to read arbitrary files via a %2e%2e (encoded dot dot) in…
    cvelistv5