CVE-2015-1164
Publication date 21 January 2015
Last updated 24 July 2024
Ubuntu priority
Open redirect vulnerability in the serve-static plugin before 1.7.2 for Node.js, when mounted at the root, allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a // (slash slash) followed by a domain in the PATH_INFO to the default URI.
Status
Package | Ubuntu Release | Status |
---|---|---|
node-serve-static | 18.04 LTS bionic |
Not affected
|
16.04 LTS xenial |
Not affected
|
|
14.04 LTS trusty | Not in release | |