CVE-2019-5447: Path Traversal
Published Jul 15, 2019
·Updated
A path traversal vulnerability in <= v0.2.6 of http-file-server npm module allows attackers to list files in arbitrary folders.
Affected Software
1 affected component
Http-file-server Project Http-file-server Node.js<=0.2.6
Remediation
Patch Available
Event History
Jul 15, 2019
CVE Published
via MITRE·05:57 PM
Data Sourced
via MITRE·05:57 PM
DescriptionWeakness
Frequently Asked Questions
1
What is the severity of CVE-2019-5447?
CVE-2019-5447 has been classified as a medium severity vulnerability.
2
How do I fix CVE-2019-5447?
To fix CVE-2019-5447, upgrade the http-file-server npm module to version 0.2.7 or higher.
3
What type of vulnerability is CVE-2019-5447?
CVE-2019-5447 is a path traversal vulnerability that allows attackers to access files outside the intended directory.
4
Which versions are affected by CVE-2019-5447?
CVE-2019-5447 affects all versions of the http-file-server npm module up to and including v0.2.6.
5
What can an attacker do with CVE-2019-5447?
An attacker exploiting CVE-2019-5447 can list files from arbitrary folders on the server.