asti (>=0.0.1, <=0.0.5), npm-git-registry (>=1.0.1, <=1.0.4) +3 more potentially affected by CVE-2017-16083 via node-simple-router (>=0.4.7, <=0.9.4-3)

node-simple-router NPM version =0.4.7, =0.0.1, =1.0.1, =0.1.5, =0.0.1, =0.0.5 Source cves: CVE-2017-16083 Source advisory: OSV:GHSA-5W8Q-X7HC-JHP6...

CVE-2017-16083

node-simple-router is a minimalistic router for Node. node-simple-router is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the URL...

CVE-2017-16083

CVE-2017-16083 corresponds to a directory traversal vulnerability in node-simple-router. The affected package resolves relative file paths, allowing an attacker to access files outside the intended directory by crafting URLs such as ../…/… to disclose sensitive files. Public references (GHSA, NPM...

CVE-2017-16083

node-simple-router is a minimalistic router for Node. node-simple-router is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the URL...