Show filters
2 Total Results
Displaying 1-2 of 2
Sort by:
Attacker Value
Unknown
CVE-2020-7687
Disclosure Date: July 25, 2020 (last updated February 21, 2025)
This affects all versions of package fast-http. There is no path sanitization in the path provided at fs.readFile in index.js.
0
Attacker Value
Unknown
CVE-2017-16155
Disclosure Date: June 07, 2018 (last updated November 26, 2024)
fast-http-cli is the command line interface for fast-http, a simple web server. fast-http-cli is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the url.
0
