Lucene search
+L

6 matches found

OSV
OSV
added 2020/09/03 8:38 p.m.22 views

GHSA-4X7W-FRCQ-V4M3 Path Traversal in @wturyn/swagger-injector

All versions of @wturyn/swagger-injector are vulnerable to Path Traversal. The package fails to sanitize URLs, allowing attackers to access server files outside of the configured dist folder using relative paths. Recommendation No fix is currently available. Consider using an alternative package...

7AI score
SaveExploits0References1
Github Security Blog
Github Security Blog
added 2020/09/03 8:38 p.m.18 views

Path Traversal in @wturyn/swagger-injector

All versions of @wturyn/swagger-injector are vulnerable to Path Traversal. The package fails to sanitize URLs, allowing attackers to access server files outside of the configured dist folder using relative paths. Recommendation No fix is currently available. Consider using an alternative package...

5.2AI score
SaveExploits0References2Affected Software1
OSV
OSV
added 2020/09/03 8:37 p.m.7 views

GHSA-V4X8-GW49-7HV4 Path Traversal in swagger-injector

All versions of swagger-injector are vulnerable to Path Traversal. The package fails to sanitize URLs, allowing attackers to access server files outside of the configured dist folder using relative paths. Recommendation No fix is currently available. Consider using an alternative package until a...

7AI score
SaveExploits0References1
vulnersOsv
vulnersOsv
added 2020/09/03 8:37 p.m.6 views

fleek-response (>=0.4.2 <=0.4.3), fleek-router (>=0.4.2 <=1.2.3) potentially affected by unknown CVE via swagger-injector (>=1.2.0 <=2.0.9)

swagger-injector NPM version =1.2.0, =0.4.2, =0.4.2, =1.2.3 Source cves: unknown CVE Source advisory: OSV:GHSA-V4X8-GW49-7HV4...

5.8AI score
SaveExploits0
Github Security Blog
Github Security Blog
added 2020/09/03 8:37 p.m.23 views

Path Traversal in swagger-injector

All versions of swagger-injector are vulnerable to Path Traversal. The package fails to sanitize URLs, allowing attackers to access server files outside of the configured dist folder using relative paths. Recommendation No fix is currently available. Consider using an alternative package until a...

5.2AI score
SaveExploits0References2Affected Software1
nodejs
nodejs
added 2019/09/17 8:2 p.m.15 views

Path Traversal

Overview All versions of @wturyn/swagger-injector are vulnerable to Path Traversal. The package fails to sanitize URLs, allowing attackers to access server files outside of the configured dist folder using relative paths. Recommendation No fix is currently available. Consider using an alternative...

6.8AI score
SaveExploits0Affected Software1
Rows per page
Query Builder