Описание
Path Traversal in stattic
Versions of stattic before 0.3.0 are vulnerable to path traversal allowing a remote attacker to read arbitrary files with any extension from the server that users stattic.
Recommendation
Update to version 0.3.0 or later.
Пакеты
Наименование
stattic
npm
Затронутые версииВерсия исправления
< 0.3.0
0.3.0
Связанные уязвимости
CVSS3: 7.5
nvd
больше 7 лет назад
stattic node module suffers from a Path Traversal vulnerability due to lack of validation of path, which allows a malicious user to read content of any file with known path.