Directory traversal

2019-08-2812:15:00

PRIOn knowledge base

www.prio-n.com

5.5 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

40.7%

JSON

cli/lib/main.js in Entropic before 2019-06-13 does not reject / and \ in command names, which might allow a directory traversal attack in unusual situations.

CPENameOperatorVersion
entropiceq< 2019613

CPE	Name	Operator	Version
	entropic	eq	< 2019613

References

github.com/entropic-dev/entropic/issues/251