Directory traversal

badjs-sourcemap-server receives files sent by badjs-sourcemap. badjs-sourcemap-server is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the url...

CVE-2017-16036

badjs-sourcemap-server receives files sent by badjs-sourcemap. badjs-sourcemap-server is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the url...

CVE-2017-16036

CVE-2017-16036 affects badjs-sourcemap-server, which is vulnerable to a directory traversal issue triggered by ../ in the URL, potentially allowing an attacker to access files outside the intended directory. Connected advisories confirm the vulnerability affects multiple sources and note that aff...

CVE-2017-16036: Improper Limitation of a Pathname to a Restricted Directory

badjs-sourcemap-server receives files sent by badjs-sourcemap. badjs-sourcemap-server is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the url...

Directory Traversal

badjs-sourcemap-server is vulnerable to directory traversal attacks. Theses attacks are possible by placing ../ in a url...

Directory Traversal

Overview Affected versions of badjs-sourcemap-server resolve relative file paths, resulting in a directory traversal vulnerability. A malicious actor can use this vulnerability to access files outside of the intended directory root, which may result in the disclosure of private files on the...

CVE-2013-5036

The Square Squash allows remote attackers to execute arbitrary code via a YAML document in the 1 namespace parameter to the deobfuscation function or 2 sourcemap parameter to the sourcemap function in app/controllers/api/v1controller.rb...

Deserialization of untrusted data

The Square Squash allows remote attackers to execute arbitrary code via a YAML document in the 1 namespace parameter to the deobfuscation function or 2 sourcemap parameter to the sourcemap function in app/controllers/api/v1controller.rb...