WS-2018-0018

A crafted request can be used to traverse the directory structure of a host using the featurebook package, and request arbitrary files outside of the specified web root...

WS-2018-0006

featurebook is vulnerable to a Directory Traversal attack...

Directory Traversal in featurebook

Affected versions of featurebook resolve relative file paths, resulting in a directory traversal vulnerability. A malicious actor can use this vulnerability to access files outside of the intended directory root, which may result in the disclosure of private files on the vulnerable system. The...

GHSA-7X92-2J68-H32C Directory Traversal in featurebook

Affected versions of featurebook resolve relative file paths, resulting in a directory traversal vulnerability. A malicious actor can use this vulnerability to access files outside of the intended directory root, which may result in the disclosure of private files on the vulnerable system. The...

PT-2020-21136

Name of the Vulnerable Software and Affected Versions featurebook affected versions not specified Description The issue allows a malicious actor to access files outside of the intended directory root, potentially disclosing private files on the vulnerable system. This is due to the resolution of...

Directory Traversal

featurebook is vulnerable to directory traversal attacks. Attackers can use strings such as http://:8081//viewer/..%2f..%2fetc/passwd to access files outside of the intended targets...

Directory Traversal

Overview Affected versions of featurebook resolve relative file paths, resulting in a directory traversal vulnerability. A malicious actor can use this vulnerability to access files outside of the intended directory root, which may result in the disclosure of private files on the vulnerable syste...

Node.js third-party modules: [featurebook] Specification Server Directory Traversal via Crafted Browser Request

Hi, A crafted request can be leveraged to traverse the directory structure of a host using the featurebook server package, and request arbitrary files outside of the specified web root. Module specification Name: featurebook Version: 0.0.32 latest release build Verified conditions Test server:...