CVE-2020-24855

CVE-2020-24855 is a directory traversal vulnerability in the open source tool easywebpack-cli prior to version 4.5.2 . The issue arises in the package’s template handling (notably the downloadTemplate function), where failure to sufficiently conceal file modes enables an attacker to craft a GET r...