CVE-2019-5423CWE-22

Path traversal vulnerability in http-live-simulator npm package version 1.0.5 allows arbitrary path to be accessed on the file system by a remote attacker

published April 3, 2019

CVSS
—
EPSS
3%
Percentile
86.5
In the wild
Unconfirmed
What it is

Path traversal vulnerability in http-live-simulator npm package version 1.0.5 allows arbitrary path to be accessed on the file system by a remote attacker.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02833 · 86.5th percentile
Weakness
CWE-22 · Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
Published
2019-04-03T14:21Z
EPSS history
Timeline
  • 03 APR 14:21Z
    Path traversal vulnerability in http-live-simulator npm package version 1.0.5 allows arbitrary path to be accessed on the file system by a remote attacker
    cvelistv5