Exploitation Summary
EIP tracks 1 public exploit for CVE-2015-1164. PoCs published by BlackFan.
AI-analyzed exploit summary The repository provides a technical description of an open redirect vulnerability in Express.js's serve-static middleware. It includes specific exploit URLs demonstrating the vulnerability, which affects versions prior to 1.7.2.
Description
Open redirect vulnerability in the serve-static plugin before 1.7.2 for Node.js, when mounted at the root, allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a // (slash slash) followed by a domain in the PATH_INFO to the default URI.
Exploits (1)
The repository provides a technical description of an open redirect vulnerability in Express.js's serve-static middleware. It includes specific exploit URLs demonstrating the vulnerability, which affects versions prior to 1.7.2.