4 matches found
Path Traversal in @wturyn/swagger-injector
All versions of @wturyn/swagger-injector are vulnerable to Path Traversal. The package fails to sanitize URLs, allowing attackers to access server files outside of the configured dist folder using relative paths. Recommendation No fix is currently available. Consider using an alternative package...
GHSA-4X7W-FRCQ-V4M3 Path Traversal in @wturyn/swagger-injector
All versions of @wturyn/swagger-injector are vulnerable to Path Traversal. The package fails to sanitize URLs, allowing attackers to access server files outside of the configured dist folder using relative paths. Recommendation No fix is currently available. Consider using an alternative package...
PT-2020-21034
Name of the Vulnerable Software and Affected Versions @wturyn/swagger-injector versions all Description The issue allows attackers to access server files outside of the configured dist folder using relative paths due to the package's failure to sanitize URLs. Recommendations Consider using an...
Path Traversal
Overview All versions of @wturyn/swagger-injector are vulnerable to Path Traversal. The package fails to sanitize URLs, allowing attackers to access server files outside of the configured dist folder using relative paths. Recommendation No fix is currently available. Consider using an alternative...