Lucene search

K
nodejs_ bl4deNODEJS:590
HistoryApr 24, 2018 - 3:46 p.m.

Path Traversal

2018-04-2415:46:07
_ bl4de
www.npmjs.com
10

0.001 Low

EPSS

Percentile

32.0%

Overview

Versions of glance before 3.0.4 are vulnerable to path traversal allowing a remote attacker to read arbitrary files from the server using glance.

Recommendation

Update to version 3.0.4 or later.

References

CPENameOperatorVersion
glancelt3.0.4

0.001 Low

EPSS

Percentile

32.0%