Lucene search
+L

2 matches found

OSV
OSV
added 2020/09/03 5:15 p.m.19 views

GHSA-GVFF-25CC-4F66 Path Traversal in restify-swagger-jsdoc

Versions of restify-swagger-jsdoc prior to 3.2.1 are vulnerable to Path Traversal. The package fails to properly sanitize URLs, which may allow attackers to access server files outside the swagger-ui folder by using relative paths. Recommendation Upgrade to version 3.2.1 or later...

7.1AI score
SaveExploits0References1
Github Security Blog
Github Security Blog
added 2020/09/03 5:15 p.m.111 views

Path Traversal in restify-swagger-jsdoc

Versions of restify-swagger-jsdoc prior to 3.2.1 are vulnerable to Path Traversal. The package fails to properly sanitize URLs, which may allow attackers to access server files outside the swagger-ui folder by using relative paths. Recommendation Upgrade to version 3.2.1 or later...

4.6AI score
SaveExploits0References2Affected Software1
Rows per page
Query Builder