Описание
restafary is a REpresentful State Transfer API for Creating, Reading, Using, Deleting files on a server from the web. Restafary before 1.6.1 is able to set up a root path, which should only allow it to run inside of that root path it specified.
Ссылки
- ExploitThird Party Advisory
- ExploitThird Party Advisory
Уязвимые конфигурации
Конфигурация 1Версия до 1.6.1 (исключая)
cpe:2.3:a:restafary_project:restafary:*:*:*:*:*:node.js:*:*
EPSS
Процентиль: 60%
0.00393
Низкий
4.9 Medium
CVSS3
4 Medium
CVSS2
Дефекты
CWE-22
CWE-22
Связанные уязвимости
EPSS
Процентиль: 60%
0.00393
Низкий
4.9 Medium
CVSS3
4 Medium
CVSS2
Дефекты
CWE-22
CWE-22