Lucene search
Veracode Vulnerability DatabaseVERACODE:25957HistoryJul 27, 2020 - 3:02 a.m.
Path Traversal
2020-07-2703:02:31
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
6
0.006 Low
EPSS
Percentile
79.3%
rollup-plugin-server is vulnerable to path traversal attack. The vulnerability exists due to a lack of proper handling of user-provided path parameters in the readFile operation performed inside the readFileFromContentBase function, allowing an attacker to access arbitrary system files using dot-dot-slash (../).
| CPE | Name | Operator | Version |
|---|---|---|---|
| rollup-plugin-server | le | 0.7.0 | |
| rollup-plugin-server | le | 0.7.0 |
Related
prion
prion
Path traversal
2020-07-25 09:15:00
cvelist
cvelist
CVE-2020-7683 Directory Traversal
2020-07-25 00:00:00
cve
cve
CVE-2020-7683
2020-07-25 09:15:11
github
github
Directory traversal in rollup-plugin-server
2020-07-29 18:07:11
osv
osv
Directory traversal in rollup-plugin-server
2020-07-29 18:07:11
nvd
nvd
CVE-2020-7683
2020-07-25 09:15:11