漏洞描述
node-srv is vulnerable to local file inclusion due to lack of url validation, which allows a malicious user to read content of any file with known path.
影响产品
修复建议
建议关注厂商安全公告，及时升级至已修复版本，并结合实际资产暴露情况采取缓解措施。
披露于 2018/06/07 · 更新于 2025/07/17
node-srv is vulnerable to local file inclusion due to lack of url validation, which allows a malicious user to read content of any file with known path.
建议关注厂商安全公告，及时升级至已修复版本，并结合实际资产暴露情况采取缓解措施。