Path Traversal in web-node-server

ÉLEVÉE 7.5CVE-2020-36651 · GHSA-3fwq-qv5v-2wxf · Published 18/01/2023 · updated 17/06/2026

En bref

CVE-2020-36651 est une vulnérabilité ÉLEVÉE (CVSS 7.5) touchant nodeserver (nodeserver project), web-node-server.
Probabilité d'exploitation dans les 30 prochains jours (EPSS) : 0.92%, plus élevée que 60.5% des vulnérabilités.
Correctif : mettre à jour vers 2020-08-21, 0.0.11 ou plus récent.

Package	Affected versions	Patched versions
nodeserver nodeserver_project	`< 2020-08-21`	`2020-08-21`
web-node-server npm	`< 0.0.11`	`0.0.11`

Description

A vulnerability has been found in youngerheart nodeserver and classified as critical. Affected by this vulnerability is an unknown functionality of the file nodeserver.js. The manipulation leads to path traversal. The name of the patch is c4c0f0138ab5afbac58e03915d446680421bde28. It is recommended to apply a patch to fix this issue. The identifier VDB-218461 was assigned to this vulnerability.

NVD description

A vulnerability has been found in youngerheart nodeserver and classified as critical. Affected by this vulnerability is an unknown functionality of the file nodeserver.js. The manipulation leads to path traversal. The identifier of the patch is c4c0f0138ab5afbac58e03915d446680421bde28. It is recommended to apply a patch to fix this issue. The identifier VDB-218461 was assigned to this vulnerability.

References

nvd.nist.gov/vuln/detail/CVE-2020-36651 · ADVISORY
youngerheart/nodeserver#6 · WEB
youngerheart/nodeserver commit c4c0f01 · WEB
youngerheart/nodeserver · PACKAGE
vuldb.com · WEB
vuldb.com · WEB

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

En bref

CVE-2020-36651 est une vulnérabilité ÉLEVÉE (CVSS 7.5) touchant nodeserver (nodeserver project), web-node-server.

Probabilité d'exploitation dans les 30 prochains jours (EPSS) : 0.92%, plus élevée que 60.5% des vulnérabilités.

Correctif : mettre à jour vers 2020-08-21, 0.0.11 ou plus récent.

Package

Affected versions

Patched versions

nodeserver

nodeserver_project

< 2020-08-21

2020-08-21

web-node-server

npm

< 0.0.11

0.0.11

Description

NVD description

A vulnerability has been found in youngerheart nodeserver and classified as critical. Affected by this vulnerability is an unknown functionality of the file nodeserver.js. The manipulation leads to path traversal. The identifier of the patch is c4c0f0138ab5afbac58e03915d446680421bde28. It is recommended to apply a patch to fix this issue. The identifier VDB-218461 was assigned to this vulnerability.