Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-h372-w3xp-2jg3

Опубликовано: 01 сент. 2020
Источник: github
Github: Прошло ревью
CVSS3: 7.5

Описание

Directory Traversal in section2.madisonjbrooks12

Affected versions of section2.madisonjbrooks12 resolve relative file paths, resulting in a directory traversal vulnerability. A malicious actor can use this vulnerability to access files outside of the intended directory root, which may result in the disclosure of private files on the vulnerable system.

Example request:

GET /../../../../../../../../../../etc/passwd HTTP/1.1 host:foo

Recommendation

No patch is available for this vulnerability.

It is recommended that the package is only used for local development, and if the functionality is needed for production, a different package is used instead.

Пакеты

Наименование

section2.madisonjbrooks12

npm
Затронутые версииВерсия исправления

>= 0.0.0

Отсутствует

EPSS

Процентиль: 67%
0.00533
Низкий

7.5 High

CVSS3

Дефекты

CWE-22

Связанные уязвимости

CVSS3: 7.5
nvd
больше 7 лет назад

section2.madisonjbrooks12 is a simple web server. section2.madisonjbrooks12 is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the url.

EPSS

Процентиль: 67%
0.00533
Низкий

7.5 High

CVSS3

Дефекты

CWE-22