CVE-2015-8859

5.3

MEDIUMCVSS v3

Published

January 23, 2017

CVSS v2

5 MEDIUM

Affected

7 projects

Assigned by

MITRE

Severity scale

010

Description

The send package before 0.11.1 for Node.js allows attackers to obtain the root path via unspecified vectors.

send

NPMBetter streaming static file server with Range and conditional-GET support

< 0.11.1NVD

pillarjs/send

GitHubStreaming static file server with Range and conditional-GET support

< 0.11.1NVD

@types/send

NPM

More on this CVE

NVD↗GitHub Advisory↗

TypeScript definitions for send

< 0.11.1NVD

koajs/send

GitHubTransfer static files

< 0.11.1NVD

nodejs

Python Package IndexPython bindings and utils for Node.js and io.js

= *NVD

nodejs

NPM

= *NVD

Node.js

NuGet GalleryNode.js uses an event-driven, non-blocking I/O model that makes it lightweight and efficient. Node.js' package ecosystem, npm, is the largest ecosystem of open source libraries in the world.

= *NVD

Security Advisories

CVE-2015-8859

Description

More on this CVE