CVE-2019-5444

Publication date

2019-07-10 19:43:03

Family

hackerone

State

PUBLISHED

Description

Path traversal vulnerability in version up to v1.1.3 in serve-here.js npm module allows attackers to list any file in arbitrary folder.