CVE-2019-15600 - A Path traversal exists in http_server which allows an attacker to read arbitrary system files

HIGH

A Path traversal exists in http_server which allows an attacker to read arbitrary system files

Published Dec 18, 2019

7.5

HIGH

CVSS 3.1

EPSS 2.51%

A Path traversal exists in http_server which allows an attacker to read arbitrary system files.

Ecosystem	Package	Introduced	Fixed
npm	http_server	0	not fixed

No remediation recorded yet.

Weaknesses (1)

CWE-22

Path Traversal

Link	Providers	Tags
https://github.com/advisories/GHSA-754x-4jwp-cqp6		Advisory
https://hackerone.com/reports/578138
https://hackerone.com/reports/692262		x_refsource_MISCIssue TrackingThird Party Advisory
https://nvd.nist.gov/vuln/detail/CVE-2019-15600
https://www.npmjs.com/advisories/1170