Lucene search
+L

4 matches found

Github Security Blog
Github Security Blog
•added 2020/09/03 8:38 p.m.•23 views

Path Traversal in @wturyn/swagger-injector

All versions of @wturyn/swagger-injector are vulnerable to Path Traversal. The package fails to sanitize URLs, allowing attackers to access server files outside of the configured dist folder using relative paths. Recommendation No fix is currently available. Consider using an alternative package...

5.2AI score
SaveExploits0References2Affected Software1
OSV
OSV
•added 2020/09/03 8:38 p.m.•31 views

GHSA-4X7W-FRCQ-V4M3 Path Traversal in @wturyn/swagger-injector

All versions of @wturyn/swagger-injector are vulnerable to Path Traversal. The package fails to sanitize URLs, allowing attackers to access server files outside of the configured dist folder using relative paths. Recommendation No fix is currently available. Consider using an alternative package...

7AI score
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2020/09/03 12:00 a.m.•0 views

PT-2020-21034

Name of the Vulnerable Software and Affected Versions @wturyn/swagger-injector versions all Description The issue allows attackers to access server files outside of the configured dist folder using relative paths due to the package's failure to sanitize URLs. Recommendations Consider using an...

5.8AI score
SaveExploits0References2
nodejs
nodejs
•added 2019/09/17 8:02 p.m.•23 views

Path Traversal

Overview All versions of @wturyn/swagger-injector are vulnerable to Path Traversal. The package fails to sanitize URLs, allowing attackers to access server files outside of the configured dist folder using relative paths. Recommendation No fix is currently available. Consider using an alternative...

6.8AI score
SaveExploits0Affected Software1
Rows per page
Query Builder