CVE-2024-34712

Oceanic is a NodeJS library for interfacing with Discord. Prior to version 1.10.4, input to functions such as "Client.rest.channels.removeBan" is not url-encoded, resulting in specially crafted input such as "../../../channels/id" being normalized into the url "/api/v10/channels/id", and deleting...

CVE-2024-34712: Relative Path Traversal

Oceanic is a NodeJS library for interfacing with Discord. Prior to version 1.10.4, input to functions such as Client.rest.channels.removeBan is not url-encoded, resulting in specially crafted input such as ../../../channels/id being normalized into the url /api/v10/channels/id, and deleting a...