CVE-2020-24855

Directory Traversal vulnerability in easywebpack-cli before 4.5.2 allows attackers to obtain sensitive information via crafted GET request...

CVE-2020-24855

Directory Traversal vulnerability in easywebpack-cli before 4.5.2 allows attackers to obtain sensitive information via crafted GET request...

CVE-2020-24855

CVE-2020-24855 is a directory traversal vulnerability in the open source tool easywebpack-cli prior to version 4.5.2 . The issue arises in the package’s template handling (notably the downloadTemplate function), where failure to sufficiently conceal file modes enables an attacker to craft a GET r...