Описание
Path Traversal in algo-httpserv
Versions of algo-httpserv prior to 1.1.2 are vulnerable to Path Traversal. Due to insufficient input sanitization, attackers can access server files by using relative paths.
Recommendation
Upgrade to version 1.1.2 or later.
Пакеты
Наименование
algo-httpserv
npm
Затронутые версииВерсия исправления
< 1.1.2
1.1.2
8.6 High
CVSS3
Дефекты
CWE-22
8.6 High
CVSS3
Дефекты
CWE-22