{"id":"CVE-2014-10068","aliases":[],"url":"https://o3.security/vulnerability/CVE-2014-10068","summary":"Hidden Directories Always Served in inert","details":"Versions 1.1.1 and earlier of `inert` are vulnerable to an information leakage vulnerability which causes files in hidden directories to be served, even when showHidden is false.\n\nThe inert directory handler always allows files in hidden directories to be served, even when `showHidden` is false.\n\n\n## Recommendation\n\nUpdate to version >= 1.1.1.","published":"2020-08-31T22:47:41Z","modified":"2023-11-08T03:57:33.777084Z","cvss":null,"epss":null,"cisaKev":null,"exploitsKnown":null,"affectedPackages":[{"ecosystem":"npm","name":"inert","fixedVersion":"1.1.1"}],"fix":{"url":"https://github.com/hapijs/inert/pull/15","label":"hapijs/inert#15"},"references":[{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2014-10068"},{"type":"WEB","url":"https://github.com/hapijs/inert/pull/15"},{"type":"WEB","url":"https://github.com/hapijs/inert/commit/e8f99f94da4cb08e8032eda984761c3f111e3e82"},{"type":"WEB","url":"https://www.npmjs.com/advisories/14"}],"provenance":{"sources":["OSV.dev","FIRST.org (EPSS)"],"lastVerified":"2023-11-08T03:57:33.777084Z"}}