Description

The send package before 0.11.1 for Node.js allows attackers to obtain the root path via unspecified vectors.

Remediation

References

http://www.openwall.com/lists/oss-security/2016/04/20/11

http://www.securityfocus.com/bid/96435

https://nodesecurity.io/advisories/56

Related Vulnerabilities

CVE-2020-2228 Vulnerability in maven package org.jenkins-ci.plugins:gitlab-oauth

CVE-2022-47105 Vulnerability in maven package org.jeecgframework.boot:jeecg-boot-base-core

CVE-2023-46122 Vulnerability in maven package org.scala-sbt:sbt

CVE-2021-21290 Vulnerability in maven package io.netty:netty-transport

CVE-2019-16776 Vulnerability in npm package npm

Severity

Medium

Classification

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Tags

Mailing List Third Party Advisory Broken Link VDB Entry Patch Vendor Advisory NVD-CWE-noinfo