CVE-2019-5415: Path Traversal
A bug in handling the ignore files and directories feature in serve 6.5.3 allows an attacker to read a file or list the directory that the victim has not allowed access to.
Other sources
Versions of serve prior to 7.0.1 are vulnerable to Path Traversal. Explicitly ignored folders can be accessed through if the path contains a /./, which allows attackers to access hidden folders and files.
Recommendation
Upgrade to version 7.0.1 or later.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2019-5415?
CVE-2019-5415 has a medium severity rating due to its potential for path traversal attacks.
Who is affected by CVE-2019-5415?
CVE-2019-5415 affects users of the 'serve' package version 6.5.3 and earlier.
How do I fix CVE-2019-5415?
To fix CVE-2019-5415, upgrade the 'serve' package to version 7.0.1 or later.
What type of vulnerability is CVE-2019-5415?
CVE-2019-5415 is classified as a path traversal vulnerability.
What can be exploited in CVE-2019-5415?
CVE-2019-5415 can be exploited to read files or list directories that are improperly allowed access.