Lucene search

Path Traversal in total.js

🗓️ 20 Feb 2019 15:13:40Reported by GitHub Advisory DatabaseType

Path Traversal vulnerability in total.js. Attackers can access server files outside the /public folder using relative paths. Limited file types served

Reporter	Title	Published	Views	Family All 15
OSV	CVE-2019-8903	18 Feb 201916:29	–	osv
OSV	Path Traversal in total.js	20 Feb 201915:40	–	osv
GithubExploit	Exploit for Path Traversal in Totaljs Total.Js	1 Dec 202009:18	–	githubexploit
Cvelist	CVE-2019-8903	18 Feb 201916:00	–	cvelist
CVE	CVE-2019-8903	18 Feb 201916:29	–	cve
OpenVAS	Total.js Directory Traversal Vulnerability	11 Mar 201900:00	–	openvas
Node.js	Path Traversal	28 Jun 201914:17	–	nodejs
AttackerKB	CVE-2019-8903	30 Oct 201900:00	–	attackerkb
AttackerKB	Total.js requestcontinue Directory Traversal Vulnerability	18 Feb 201900:00	–	attackerkb
NVD	CVE-2019-8903	18 Feb 201916:29	–	nvd

Vulners

Node

totaljs total.jsRange<3.2.3

Source	Link
nvd	www.nvd.nist.gov/vuln/detail/CVE-2019-8903
github	www.github.com/advisories/GHSA-3q32-j57w-q4w7
npmjs	www.npmjs.com/advisories/1026
github	www.github.com/totaljs/framework/commit/c37cafbf3e379a98db71c1125533d1e8d5b5aef7
github	www.github.com/totaljs/framework/commit/de16238d13848149f5d1dae51f54e397a525932b
blog	www.blog.certimetergroup.com/it/articolo/security/total.js-directory-traversal-cve-2019-8903

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

20 Feb 2019 15:40Current

0.8Low risk

Vulners AI Score0.8

CVSS25

CVSS37.5

EPSS0.80591

CWE-22