CyberRota Analysis
AI-GeneratedA path traversal vulnerability exists in the serveStatic function of the restify library, affecting versions up to 12.0.0, which could allow remote attackers to access arbitrary files on the server. Organizations using this library should prioritize remediation to mitigate potential unauthorized access to sensitive data. Given the lack of vendor response, users are advised to assess their exposure and implement necessary security measures promptly.
Original NVD Description
A flaw has been found in restify node-restify up to 12.0.0. This affects the function serveStatic in the library /lib/plugins/static.js. This manipulation causes path traversal. The attack can be initiated remotely. The vendor was contacted early about this disclosure but did not respond in any way.