Moole Vulnerability Database

Find real vulnerabilities before they ship

High

CVE-2014-10068

The inert directory handler in inert node module before 1.1.1 always allows files in hidden directories to be served, even when `showHidden` is false.

VectorNETWORK

PublishedMay 29, 2018, 20:29

Published Bysupport@hackerone.com

Base Score

Score7.5

Affected Versions

Package (Ecosystem)IntroducedFixedLimit

inert(npm)01.1.1N/A

References

https://github.com/hapijs/inert/commit/e8f99f94da4cb08e8032eda984761c3f111e3e82
https://github.com/hapijs/inert/pull/15
https://nodesecurity.io/advisories/14

Weakness Type

CWE-22

CVSS Metrics

Base Score

7.5

Vector String

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Base SeverityHigh

Version

3.1

Attack Vector (AV)

NETWORK