Junglewise Threat Intelligence

CVE-2024-32966: static-web-server vulnerable to stored Cross-site Scripting in directory listings via file names

CVE-2024-32966 · Severity: low · CVSS 3.1 · Published 2024-05-01

Technologies: static-web-server (crates.io). Vendors: crates.io.

Executive brief

static-web-server vulnerable to stored Cross-site Scripting in directory listings via file names

Affected products

crates.io static-web-server

Related threats

Static Web Server affected by timing-based username enumeration in Basic Authentication due to early response on invalid usernames
Static Web Server vulnerable to a symbolic link path traversal