CVEs (2)
CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS |
|---|
1Statics Server Project 1Statics Server Jun 17, 2026 Dec 18, 2019 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 A path traversal in statics-server exists in all version that allows an attacker to perform a path traversal when a symlink is used within the working directory. |
1Statics Server Project 1Statics Server Nov 21, 2024 Jul 20, 2018 N/A· v4 6.1 MEDIUM· v3 4.3 MEDIUM· v2 An XSS in statics-server <= 0.0.9 can be used via injected iframe in the filename when statics-server displays directory index in the browser. |