EUVD-2022-7703

Malicious code in bioql PyPI...

CVE-2020-36629

A vulnerability classified as critical was found in SimbCo httpster. This vulnerability affects the function fs.realpathSync of the file src/server.coffee. The manipulation leads to path traversal. The exploit has been disclosed to the public and may be used. The name of the patch is...

Path Traversal

httpster is vulnerable to path traversal. The vulnerability exists in server.js because it accesses files and directories that are stored outside the intended folder, which allows an attacker to access arbitrary files and directories stored...

SimbCo httpster vulnerable to Path Traversal

A vulnerability classified as critical was found in SimbCo httpster. This vulnerability affects the function fs.realpathSync of the file src/server.coffee. The manipulation leads to path traversal. The exploit has been disclosed to the public and may be used. The name of the patch is...

@github1/protractor-axe-html-report-plugin (>=1.1.2 <=1.1.3), protractor-axe-html-report-plugin (>=0.0.1 <=1.1.1) +1 more potentially affected by CVE-2020-36629 via httpster (=1.0.3)

httpster NPM version =1.0.3 is affected by a known vulnerability. The following packages have a transitive dependency on httpster and may be impacted: - @github1/protractor-axe-html-report-plugin =1.1.2, =0.0.1, =1.0.0, =2.1.0 Source cves: CVE-2020-36629 Source advisory: OSV:GHSA-P8J8-WXVP-H695...

GHSA-P8J8-WXVP-H695 SimbCo httpster vulnerable to Path Traversal

A vulnerability classified as critical was found in SimbCo httpster. This vulnerability affects the function fs.realpathSync of the file src/server.coffee. The manipulation leads to path traversal. The exploit has been disclosed to the public and may be used. The name of the patch is...

CVE-2020-36629

A vulnerability classified as critical was found in SimbCo httpster. This vulnerability affects the function fs.realpathSync of the file src/server.coffee. The manipulation leads to path traversal. The exploit has been disclosed to the public and may be used. The name of the patch is...

CVE-2020-36629

A vulnerability classified as critical was found in SimbCo httpster. This vulnerability affects the function fs.realpathSync of the file src/server.coffee. The manipulation leads to path traversal. The exploit has been disclosed to the public and may be used. The name of the patch is...

Path traversal

A vulnerability classified as critical was found in SimbCo httpster. This vulnerability affects the function fs.realpathSync of the file src/server.coffee. The manipulation leads to path traversal. The exploit has been disclosed to the public and may be used. The name of the patch is...

CVE-2020-36629 SimbCo httpster server.coffee fs.realpathSync path traversal

A vulnerability classified as critical was found in SimbCo httpster. This vulnerability affects the function fs.realpathSync of the file src/server.coffee. The manipulation leads to path traversal. The exploit has been disclosed to the public and may be used. The name of the patch is...

CVE-2020-36629

CVE-2020-36629 affects SimbCo httpster (fs.realpathSync in src/server.coffee), enabling path traversal. Exploit has been disclosed publicly. Patch d3055b3e30b40b65d30c5a06d6e053dffa7f35d0 is available and should be applied to fix. CVSSv3.1 base score 7.5 (HIGH) per NVD.

CVE-2020-36629 SimbCo httpster server.coffee fs.realpathSync path traversal

A vulnerability classified as critical was found in SimbCo httpster. This vulnerability affects the function fs.realpathSync of the file src/server.coffee. The manipulation leads to path traversal. The exploit has been disclosed to the public and may be used. The name of the patch is...

httpster 路径遍历漏洞

httpster is a SimbCo open source simple http server for fast content loading. A path traversal vulnerability exists in httpster, which stems from a problem with the function fs.realpathSync in the file src/server.coffee, which can lead to path traversal...

Path Traversal in simbco/httpster

Description I would like to report a Path Traversal vulnerability in the httpster module. It allows an attacker to read system files via a Path Traversal vulnerability. With a symbolically linked file in the working directory, it is possible to read arbitrary files outside of the web root...