Geddy <13.0.8 - Local File Inclusion

Geddy prior to version 13.0.8 contains a directory traversal vulnerability in lib/app/index.js that allows remote attackers to read arbitrary files via a ..%2f dot dot encoded slash in the PATHINFO to the default URI. id: CVE-2015-5688 info: name: Geddy 13.0.8 - Local File Inclusion author:...

CVE-2015-5688

creationtimestamp| type| source ---|---|--- 2017-10-24 18:33:36+00:00| published-proof-of-concept| https://github.com/advisories/GHSA-333x-9vgq-v2j4...

scotch-blog (>=0.1.0 <=0.1.7) potentially affected by CVE-2015-5688 via geddy (>=0.8.14 <=0.9.18)

geddy NPM version =0.8.14, =0.1.0, =0.1.7 Source cves: CVE-2015-5688 Source advisory: OSV:GHSA-333X-9VGQ-V2J4...