Statics Server Project Statics Server vulnerabilities

2 vulnerabilities

Known vulnerabilities in Statics Server Project Statics Server, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

6.1CVE-2018-3771hackeronestatics-server+2
EPSS score
0.93%
An XSS in statics-server <= 0.0.9 can be used via injected iframe in the filename when statics-server displays directory index in the browser.7.5CVE-2019-15596Npmstatics-server+1
EPSS score
1.53%
A path traversal in statics-server exists in all version that allows an attacker to perform a path traversal when a symlink is used within the working directory.