CVE-2014-10068

Published May 29th, 2018

View on NVD ↗

CVSS v3

7.5

HIGH

CVSS v2

MEDIUM

Affected

PROJECT

Description

The inert directory handler in inert node module before 1.1.1 always allows files in hidden directories to be served, even when `showHidden` is false.

hapijs/inert

Static file and directory handlers for hapi.js

GitHub

236