Описание
augustine node module suffers from a Path Traversal vulnerability due to lack of validation of url, which allows a malicious user to read content of any file with known path.
Ссылки
- ExploitIssue TrackingThird Party Advisory
- ExploitIssue TrackingThird Party Advisory
Уязвимые конфигурации
Конфигурация 1
cpe:2.3:a:augustine_project:augustine:0.2.3:*:*:*:*:node.js:*:*
EPSS
Процентиль: 65%
0.00489
Низкий
6.5 Medium
CVSS3
4 Medium
CVSS2
Дефекты
CWE-22
CWE-22
Связанные уязвимости
EPSS
Процентиль: 65%
0.00489
Низкий
6.5 Medium
CVSS3
4 Medium
CVSS2
Дефекты
CWE-22
CWE-22