Lucene search
GoogleOSV:GHSA-62G9-6HW5-RWFPHistoryJul 18, 2018 - 9:20 p.m.
Path Traversal in resolve-path
2018-07-1821:20:25
Google
osv.dev
9
0.003 Low
EPSS
Percentile
71.6%
Versions of resolve-path before 1.4.0 are vulnerable to path traversal. resolve-path relative path resolving suffers from a lack of file path sanitization for windows based paths.
Recommendation
Update to version 1.4.0 or later.
| CPE | Name | Operator | Version |
|---|---|---|---|
| resolve-path | lt | 1.4.0 |
Related
prion
prion
Path traversal
2018-06-07 02:29:00
veracode
veracode
Path Traversal
2018-02-23 02:43:48
nvd
nvd
CVE-2018-3732
2018-06-07 02:29:08
github
github
Path Traversal in resolve-path
2018-07-18 21:20:25
osv
osv
CVE-2018-3732
2018-06-07 02:29:08
cvelist
cvelist
CVE-2018-3732
2018-04-26 00:00:00
hackerone
hackerone
Node.js third-party modules: Path Traversal on Resolve-Path
2018-02-13 21:48:00
cve
cve
CVE-2018-3732
2018-06-07 02:29:08
nodejs
nodejs
Path Traversal
2018-04-20 21:48:06
