CVE-2014-10068: Path Traversal
Published May 29, 2018
·Updated
The inert directory handler in inert node module before 1.1.1 always allows files in hidden directories to be served, even when showHidden is false.
Affected Software
1 affected component
Hapi Inert Node.js<1.1.1
Remediation
Patch Available
Patch Available
Event History
May 29, 2018
CVE Published
via MITRE·08:00 PM
Data Sourced
via MITRE·08:00 PM
DescriptionWeakness
Frequently Asked Questions
1
What is the severity of CVE-2014-10068?
CVE-2014-10068 is classified as a moderate severity vulnerability.
2
How do I fix CVE-2014-10068?
To fix CVE-2014-10068, upgrade to inert node module version 1.1.1 or later.
3
What types of files are affected by CVE-2014-10068?
CVE-2014-10068 affects files located in hidden directories when using the inert node module.
4
Can CVE-2014-10068 be exploited without user interaction?
Yes, CVE-2014-10068 can be exploited remotely without any user interaction.
5
Is there any workaround for CVE-2014-10068 if I cannot upgrade?
A workaround for CVE-2014-10068 involves configuring the inert module to restrict access to hidden directories.