Описание
Path Traversal in m-server
Versions of m-server before 1.4.2 are vulnerable to path traversal allowing a remote attacker to display content of arbitrary files from the server.
Recommendation
Update to version 1.4.2 or later.
Пакеты
Наименование
m-server
npm
Затронутые версииВерсия исправления
< 1.4.2
1.4.2
Дефекты
CWE-22
Дефекты
CWE-22