VYPR
← All advisories
Medium severity5.4NVD Advisory· Published Jul 30, 2019· Updated Jun 17, 2026

CVE-2019-5458

CVE-2019-5458

Description

Cross-site scripting (XSS) vulnerability in http-file-server (all versions) allows an attacker with access to the server file system to execute arbitrary JavaScript code in victim's browser.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

PackageAffected versionsPatched versions
http-file-servernpm
<= 0.2.6—

Affected products

10
  • HTTP File Server Project/HTTP File Server8 versions
    cpe:2.3:a:http-file-server_project:http-file-server:0.1.0:*:*:*:*:node.js:*:*+ 7 more
    • cpe:2.3:a:http-file-server_project:http-file-server:0.1.0:*:*:*:*:node.js:*:*
    • cpe:2.3:a:http-file-server_project:http-file-server:0.2.0:*:*:*:*:node.js:*:*
    • cpe:2.3:a:http-file-server_project:http-file-server:0.2.1:*:*:*:*:node.js:*:*
    • cpe:2.3:a:http-file-server_project:http-file-server:0.2.2:*:*:*:*:node.js:*:*
    • cpe:2.3:a:http-file-server_project:http-file-server:0.2.3:*:*:*:*:node.js:*:*
    • cpe:2.3:a:http-file-server_project:http-file-server:0.2.4:*:*:*:*:node.js:*:*
    • cpe:2.3:a:http-file-server_project:http-file-server:0.2.5:*:*:*:*:node.js:*:*
    • cpe:2.3:a:http-file-server_project:http-file-server:0.2.6:*:*:*:*:node.js:*:*
  • ghsa-coords
    pkg:npm/http-file-server
    Range: <= 0.2.6
  • Rejetto/HTTP File Serverv5
    Range: Not Fixed

Patches

Vulnerability mechanics

References

4

News mentions

0

No linked articles in our index yet.