Lucene search
Orange_8361NODEJS:573HistoryApr 20, 2018 - 9:48 p.m.
Path Traversal
2018-04-2021:48:06
orange_8361
www.npmjs.com
85
0.003 Low
EPSS
Percentile
71.6%
Overview
Versions of resolve-path before 1.4.0 are vulnerable to path traversal. resolve-path relative path resolving suffers from a lack of file path sanitization for windows based paths.
Recommendation
Update to version 1.4.0 or later.
References
| CPE | Name | Operator | Version |
|---|---|---|---|
| resolve-path | lt | 1.4.0 |
Related
prion
prion
Path traversal
2018-06-07 02:29:00
veracode
veracode
Path Traversal
2018-02-23 02:43:48
nvd
nvd
CVE-2018-3732
2018-06-07 02:29:08
github
github
Path Traversal in resolve-path
2018-07-18 21:20:25
osv
osv
CVE-2018-3732
2018-06-07 02:29:08
Path Traversal in resolve-path
2018-07-18 21:20:25
cvelist
cvelist
CVE-2018-3732
2018-04-26 00:00:00
hackerone
hackerone
Node.js third-party modules: Path Traversal on Resolve-Path
2018-02-13 21:48:00
cve
cve
CVE-2018-3732
2018-06-07 02:29:08
