EUVD-2018-0726

Malware in sbrugna...

GHSA-3HVM-HGPW-RX4J Path Traversal in knightjs

All versions of knightjs are vulnerable to Path Traversal. This vulnerability allows an attacker to read content of arbitrary files on the server due to lack of input validation. Recommendation As there is currently no fix for this module we recommend not using this module in production...

Path Traversal in knightjs

All versions of knightjs are vulnerable to Path Traversal. This vulnerability allows an attacker to read content of arbitrary files on the server due to lack of input validation. Recommendation As there is currently no fix for this module we recommend not using this module in production...

CVE-2018-16475

A Path Traversal in Knightjs versions = 0.0.1 allows an attacker to read content of arbitrary files on a remote server...

Path traversal

A Path Traversal in Knightjs versions = 0.0.1 allows an attacker to read content of arbitrary files on a remote server...

CVE-2018-16475

A Path Traversal in Knightjs versions = 0.0.1 allows an attacker to read content of arbitrary files on a remote server...

CVE-2018-16475

A Path Traversal in Knightjs versions = 0.0.1 allows an attacker to read content of arbitrary files on a remote server...

CVE-2018-16475

The CVE-2018-16475 entry corresponds to a Path Traversal vulnerability in knightjs. The connected data shows that all versions of knightjs up to 0.0.1 are vulnerable due to lack of input validation, allowing an attacker to read arbitrary files on the server (e.g., via crafted URL paths such as .....

Directory Traversal

knightjs is vulnerable to a directory traversal attack. The library does not sanitize incoming HTTP requests, allowing a malicious user to pass a HTTP request with a pathname containing ../ to traverse the directory and access sensitive information...

Node.js third-party modules: [knightjs] Path Traversal allows to read content of arbitrary files

I would like to report Path Travelsal in Knightjs It allows attacker to read content of arbitary file on remote server. Module module name: Knightjs version: 0.0.1 npm page: https://www.npmjs.com/package/knightjs Module Description knight is a simple static server without configuration on the top...