Most recent entries from all

cnvd-2018-13864

EUVD-2026-167532

fkie_cve-2017-16083

node-simple-router is a minimalistic router for Node. node-simple-router is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the URL.

GHSA-5w8q-x7hc-jhp6 — Directory Traversal in node-simple-router

Affected: npm: node-simple-router

Affected versions of `node-simple-router` resolve relative file paths, resulting in a directory traversal vulnerability. A malicious actor can use this vulnerability to access files outside of the intended directory root, which may result in the disclosure of private files on the vulnerable system.

**Example request:** ```http GET /../../../../../../../../../../etc/passwd HTTP/1.1 host:foo ```

## Recommendation

Update to v0.10.1 or later.

Most recent entries from all

cnvd-2018-13864

EUVD-2026-167532

fkie_cve-2017-16083

GHSA-5w8q-x7hc-jhp6 — Directory Traversal in node-simple-router

gsd-2017-16083