CVE-2019-5437CWE-548

Information exposure through the directory listing in npm's harp module allows to access files that are supposed to be ignored according to the harp server…

published May 10, 2019

CVSS
—
EPSS
1%
Percentile
70.3
In the wild
Unconfirmed
What it is

Information exposure through the directory listing in npm's harp module allows to access files that are supposed to be ignored according to the harp server rules.Vulnerable versions are <= 0.29.0 and no fix was applied to our knowledge.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01313 · 70.3th percentile
Weakness
CWE-548 · Exposure of Information Through Directory Listing
Published
2019-05-10T21:07Z
EPSS history
Timeline
  • 10 MAY 21:07Z
    Information exposure through the directory listing in npm's harp module allows to access files that are supposed to be ignored according to the harp server…
    cvelistv5