Описание
Unauthorized File Access in node-git-server
Versions of node-git-server prior to 0.6.1 are vulnerable to Unauthorized File Access. It is possible to access any git repository by using absolute paths, which may allow attackers to access private repositories.
Recommendation
Upgrade to version 0.6.1 or later.
Пакеты
Наименование
node-git-server
npm
Затронутые версииВерсия исправления
< 0.6.1
0.6.1
7.5 High
CVSS3
Дефекты
CWE-552
7.5 High
CVSS3
Дефекты
CWE-552