CVE-2019-5416CWE-22

A path traversal vulnerability in localhost-now npm package version 1.0.2 allows the attackers to read content of arbitrary files on the remote server

published March 17, 2019

CVSS
—
EPSS
2%
Percentile
82.5
In the wild
Unconfirmed
What it is

A path traversal vulnerability in localhost-now npm package version 1.0.2 allows the attackers to read content of arbitrary files on the remote server.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02210 · 82.5th percentile
Weakness
CWE-22 · Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
Published
2019-03-17T19:34Z
EPSS history
Timeline
  • 17 MAR 19:34Z
    A path traversal vulnerability in localhost-now npm package version 1.0.2 allows the attackers to read content of arbitrary files on the remote server
    cvelistv5