Vulners
Lucene search
3 matches found
EUVD-2021-10427
Malware in sbrugna...
5.3CVSS5.5AI score0.00047EPSS
Exploits1References3
Directory traversal
All versions of package github.com/tyktechnologies/tyk/gateway are vulnerable to Directory Traversal via the handleAddOrUpdateApi function. This function is able to delete arbitrary JSON files on the disk where Tyk is running via the management API. The APIID is provided by the user and this valu...
4.6CVSS5.3AI score0.00047EPSS
Exploits1References2
CVE-2021-23357 Directory Traversal
All versions of package github.com/tyktechnologies/tyk/gateway are vulnerable to Directory Traversal via the handleAddOrUpdateApi function. This function is able to delete arbitrary JSON files on the disk where Tyk is running via the management API. The APIID is provided by the user and this valu...
3.3CVSS5.6AI score0.00047EPSS
Exploits1References2
20