Serve Index

1 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2015-8856 npm MEDIUM PATCH This Month

Cross-site scripting (XSS) vulnerability in the serve-index package before 1.6.3 for Node.js allows remote attackers to inject arbitrary web script or HTML via a crafted file or directory name. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

XSS Node.js Serve Index

NVD VulDB

CVSS 3.1

6.1

EPSS

0.4%

CVE-2015-8856 npm

EPSS 0% CVSS 6.1

MEDIUM PATCH This Month

Cross-site scripting (XSS) vulnerability in the serve-index package before 1.6.3 for Node.js allows remote attackers to inject arbitrary web script or HTML via a crafted file or directory name. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

XSS Node.js Serve Index

NVD VulDB

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy