← Back

Http File Server Project

http-file-server_project

3 CVEs • 1 product

Products (1)

Click to collapse
Toggle
Http File Server
http-file-server
3 CVEs

CVEs (3)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2021-40668
1Http File Server Project
1Http File Server
Jun 17, 2026
Jun 9, 2022
N/A· v4
8.1 HIGH· v3
5.5 MEDIUM· v2
The Android application HTTP File Server (Version 1.4.1) by 'slowscript' is affected by a path traversal vulnerability that permits arbitrary directory listing, file read, and file write.
CVE-2019-5458
1Http File Server Project
1Http File Server
Jun 17, 2026
Jul 30, 2019
N/A· v4
5.4 MEDIUM· v3
3.5 LOW· v2
Cross-site scripting (XSS) vulnerability in http-file-server (all versions) allows an attacker with access to the server file system to execute arbitrary JavaScript code in victim's browser.
CVE-2019-5447
1Http File Server Project
1Http File Server
Jun 17, 2026
Jul 15, 2019
N/A· v4
5.3 MEDIUM· v3
5.0 MEDIUM· v2
A path traversal vulnerability in <= v0.2.6 of http-file-server npm module allows attackers to list files in arbitrary folders.