.. / CVE-2014-3744

Exploit for Node.js st module Directory Traversal (CVE-2014-3744)

Description:

A directory traversal vulnerability in the st module before 0.2.5 for Node.js allows remote attackers to read arbitrary files via a %2e%2e (encoded dot dot) in an unspecified path.

Nuclei Template

View the template here CVE-2014-3744.yaml

Validate with Nuclei

echo "$URL" | nuclei -t ~/nuclei-templates/http/cves/2014/CVE-2014-3744.yaml
Copy

References:

https://snyk.io/vuln/npm:st:20140206
https://github.com/advisories/GHSA-69rr-wvh9-6c4q
https://nodesecurity.io/advisories/st_directory_traversal
https://nvd.nist.gov/vuln/detail/CVE-2014-3744
http://www.openwall.com/lists/oss-security/2014/05/13/1