CVE-2014-125098 – Dart http_server Directory Listing virtual_directory.dart VirtualDirectory cross site scripting

https://notcve.org/view.php?id=CVE-2014-125098

10 Apr 2023 — A vulnerability was found in Dart http_server up to 0.9.5 and classified as problematic. Affected by this issue is the function VirtualDirectory of the file lib/src/virtual_directory.dart of the component Directory Listing Handler. The manipulation of the argument request.uri.path leads to cross site scripting. The attack may be launched remotely. Upgrading to version 0.9.6 is able to address this issue. • https://codereview.chromium.org/225813002 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •