Описание
Hono is a Web application framework that provides support for any JavaScript runtime. Prior to version 4.2.7, when using serveStatic with deno, it is possible to traverse the directory where main.ts is located. This can result in retrieval of unexpected files. Version 4.2.7 contains a patch for the issue.
Ссылки
- Patch
- ExploitVendor Advisory
- Patch
- ExploitVendor Advisory
Уязвимые конфигурации
Конфигурация 1Версия до 4.2.7 (исключая)
cpe:2.3:a:hono:hono:*:*:*:*:*:node.js:*:*
EPSS
Процентиль: 49%
0.00642
Низкий
5.3 Medium
CVSS3
Дефекты
CWE-22
Связанные уязвимости
CVSS3: 5.3
github
больше 2 лет назад
Hono vulnerable to Restricted Directory Traversal in serveStatic with deno
EPSS
Процентиль: 49%
0.00642
Низкий
5.3 Medium
CVSS3
Дефекты
CWE-22