CVE Intelligence

Lukejacksonn vulnerabilities

🔔 Create alert RSS

Published CVEs affecting Lukejacksonn products: 1 record(s), with severity, exploitation and fixes.

Servor 1

Exploited only (KEV) →

CVE-2021-48011 High · 7.5 CWE-22 Oct 12, 2026
Servor 1.0.0 through 4.0.2 Unauthenticated Path Traversal via URL-Encoded Dot Segments
Servor 1.0.0 through 4.0.2 contains a path traversal vulnerability that allows unauthenticated remote attackers to escape the served root by sending URL-encoded dot segments. Attackers can send %2e%2e/ sequences, which decodeURI() decodes before path.join() in serveStaticFile and serveDirectoryListing, to read arbitrary files and list directories outside the root.