Описание
Path Traversal in http-live-simulator
Versions of http-live-simulator prior to 1.0.6 are vulnerable to Path Traversal. Due to insufficient input sanitization, attackers can access server files by using relative paths.
Recommendation
Upgrade to version 1.0.6
Пакеты
Наименование
http-live-simulator
npm
Затронутые версииВерсия исправления
< 1.0.6
1.0.6
Связанные уязвимости
CVSS3: 7.5
nvd
почти 7 лет назад
Path traversal vulnerability in http-live-simulator npm package version 1.0.5 allows arbitrary path to be accessed on the file system by a remote attacker.