cloudcmd (>=5.0.5, <=5.0.15), dword (>=2.7.4, <=2.9.1) +1 more potentially affected by CVE-2016-10528 via restafary (1.5.3)

restafary NPM version 1.5.3 is affected by a known vulnerability. The following packages have a transitive dependency on restafary and may be impacted: - cloudcmd =5.0.5, =2.7.4, =2.7.3, =2.9.0 Source cves: CVE-2016-10528 Source advisory: OSV:GHSA-XG5R-8J97-2WRJ...

CVE-2016-10528

restafary is a REpresentful State Transfer API for Creating, Reading, Using, Deleting files on a server from the web. Restafary before 1.6.1 is able to set up a root path, which should only allow it to run inside of that root path it specified...

CVE-2016-10528

CVE-2016-10528 affects the restafary REST file API. Affected versions prior to 1.6.1 allow a configured root path to be bypassed, enabling directory traversal when accessing files outside the intended root. The vulnerability is demonstrated by examples in public advisories (e.g., GHSA and related...

CVE-2016-10528

restafary is a REpresentful State Transfer API for Creating, Reading, Using, Deleting files on a server from the web. Restafary before 1.6.1 is able to set up a root path, which should only allow it to run inside of that root path it specified...