Http-File-Server Project Http-File-Server
2 CVEs affecting Http-File-Server Project Http-File-Server. Latest disclosed: 2019-07-30. Critical: 0, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2019-5458 | Medium | 5.4 | 2019-07-30 | Cross-site scripting (XSS) vulnerability in http-file-server (all versions) allows an attacker with access to the server file system to execute arbitrary JavaS… |
CVE-2019-5447 | Medium | 5.3 | 2019-07-15 | A path traversal vulnerability in <= v0.2.6 of http-file-server npm module allows attackers to list files in arbitrary folders. |