Описание
Path Traversal in localhost-now
All versions of localhost-now are vulnerable to Path Traversal. The package fails to sanitize URLs, allowing attackers to access server files outside of the served folder using relative paths.
Recommendation
No fix is currently available. Consider using an alternative package until a fix is made available.
Пакеты
Наименование
localhost-now
npm
Затронутые версииВерсия исправления
<= 1.0.2
Отсутствует
Связанные уязвимости
CVSS3: 7.5
nvd
почти 7 лет назад
A path traversal vulnerability in localhost-now npm package version 1.0.2 allows the attackers to read content of arbitrary files on the remote server.