Описание
Path Traversal in crud-file-server
Versions of crud-file-server prior to 0.9.0 are vulnerable to Path Traversal. The package fails to sanitize URLs, allowing attackers to access server files outside of the served folder using relative paths.
Recommendation
Upgrade to version 0.9.0 or later.
Пакеты
Наименование
crud-file-server
npm
Затронутые версииВерсия исправления
< 0.9.0
0.9.0
Связанные уязвимости
CVSS3: 7.5
nvd
больше 7 лет назад
crud-file-server node module before 0.9.0 suffers from a Path Traversal vulnerability due to incorrect validation of url, which allows a malicious user to read content of any file with known path.