WS-2020-0441

In zenn-cli in versions 0.1.36 to 0.1.39 is vulnerable to path traversal, it allows the attacker to read arbitrary .md files...

Directory Traversal

zenn-cli is vulnerable to directory traversal. The vulnerability exists as it is possible to bypass the sanitization through \ on Windows...

Node.js third-party modules: [zenn-cli] Path traversal on Windows allows the attacker to read arbitrary .md files

Summary I would like to report path traversal in zenn-cli. It allows the attacker to read arbitrary .md files. Module module name: zenn-cli version: 0.1.39 npm page: https://www.npmjs.com/package/zenn-cli Module Description Manage Zenn content locally 👩‍💻 Module Stats 885 weekly downloads...