Simplehttpserver
CVEs (3)
| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2018-3787 | Hig | 0.49 | 7.5 | 0.02 | Aug 31, 2018 | Path traversal in simplehttpserver <v0.2.1 allows listing any file on the server. | ||
| CVE-2018-16478 | Med | 0.35 | 5.3 | 0.01 | Dec 4, 2018 | A Path Traversal in simplehttpserver versions <=0.2.1 allows to list any file in another folder of web root. | ||
| CVE-2018-3716 | Med | 0.35 | 5.4 | 0.01 | Jun 7, 2018 | simplehttpserver node module suffers from a Cross-Site Scripting vulnerability to a lack of validation of file names. |
- risk 0.49cvss 7.5epss 0.02
Path traversal in simplehttpserver <v0.2.1 allows listing any file on the server.
- risk 0.35cvss 5.3epss 0.01
A Path Traversal in simplehttpserver versions <=0.2.1 allows to list any file in another folder of web root.
- risk 0.35cvss 5.4epss 0.01
simplehttpserver node module suffers from a Cross-Site Scripting vulnerability to a lack of validation of file names.