What’s Vulnerable › Vulnerabilities

CVE-2014-10068

• Severity: high (CVSS 7.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.9% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2018-05-29 · updated 2026-06-17
• Weakness: CWE-22

Description

The inert directory handler in inert node module before 1.1.1 always allows files in hidden directories to be served, even when `showHidden` is false.

Affected products

• HackerOne inert node module: before 1.1.1 — fixed in 1.1.1

How to fix

Upgrade to a fixed version: HackerOne inert node module 1.1.1. Check the vendor advisory for mitigations.

References

• https://github.com/hapijs/inert/commit/e8f99f94da4cb08e8032eda984761c3f111e3e82
• https://github.com/hapijs/inert/pull/15
• https://nodesecurity.io/advisories/14
• https://github.com/hapijs/inert/commit/e8f99f94da4cb08e8032eda984761c3f111e3e82
• https://github.com/hapijs/inert/pull/15
• https://nodesecurity.io/advisories/14

Get alerted when CVE-2014-10068 or the next vulnerability affects your stack