Описание
angular-http-server node module suffers from a Path Traversal vulnerability due to lack of validation of possibleFilename, which allows a malicious user to read content of any file with known path.
Ссылки
- ExploitIssue TrackingThird Party Advisory
- ExploitIssue TrackingThird Party Advisory
Уязвимые конфигурации
Конфигурация 1
cpe:2.3:a:angular-http-server_project:angular-http-server:*:*:*:*:*:node.js:*:*
EPSS
Процентиль: 70%
0.0063
Низкий
6.5 Medium
CVSS3
4 Medium
CVSS2
Дефекты
CWE-22
CWE-22
Связанные уязвимости
EPSS
Процентиль: 70%
0.0063
Низкий
6.5 Medium
CVSS3
4 Medium
CVSS2
Дефекты
CWE-22
CWE-22